CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

24 matches found

Kitploit•added 2026/10/26 10:19 a.m.•15 views

CVE-2026-100381

CVE-2026-100381: DOM XSS in Flickr collection and set titles Reporter: Marco Paciaroni BomboBombone. UploadWizard inserted Flickr collection and set titles through an API that interpreted strings as HTML. External title metadata could therefore become executable markup in the wiki page. Affected...

5.3CVSS6.2AI score0.00417EPSS

SaveExploits0References1

EUVD•added 2026/09/26 12:32 a.m.•16 views

EUVD-2026-87347

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UploadWizard Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - UploadWizard Extension: from before 1.46.1, 1.45.5, 1.43.10...

5.3CVSS5.7AI score0.00417EPSS

SaveExploits0References3

NVD•added 2026/09/25 10:17 p.m.•30 views

CVE-2026-100381

5.3CVSS0.00417EPSS

SaveExploits0References2

CVE•added 2026/09/25 9:00 p.m.•18 views

CVE-2026-100381

The Wikimedia Foundation Mediawiki - UploadWizard Extension is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the Flickr collection and set titles allow for DOM XSS . This issue affects versions prior to 1.46.1 , 1.45.5 ,...

5.3CVSS5.7AI score0.00417EPSS

SaveExploits0References2

Cvelist•added 2026/09/25 9:00 p.m.•35 views

CVE-2026-100381 UploadWizard Flickr collection and set titles allow DOM XSS

5.3CVSS0.00417EPSS

SaveExploits0References2

Vulnrichment•added 2026/09/25 9:00 p.m.•20 views

CVE-2026-100381 UploadWizard Flickr collection and set titles allow DOM XSS

5.3CVSS5.7AI score0.00417EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/09/25 12:00 a.m.•11 views

CVE-2026-100381: Improper Neutralization of Input During Web Page Generation

5.3CVSS5.7AI score0.00417EPSS

SaveExploits0References2

Positive Technologies•added 2026/09/25 12:00 a.m.•15 views

PT-2026-99125

Name of the Vulnerable Software and Affected Versions Mediawiki - UploadWizard Extension versions prior to 1.46.1 Mediawiki - UploadWizard Extension version 1.45.5 Mediawiki - UploadWizard Extension version 1.43.10 Description Improper neutralization of input during web page generation allows for...

5.3CVSS5.7AI score0.00417EPSS

SaveExploits0References7

RedhatCVE•added 2026/01/10 5:41 a.m.•23 views

CVE-2026-0671

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting XSS.This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39...

6.1CVSS5.8AI score0.00241EPSS

SaveExploits1References1

osv_cve•added 2026/01/08 5:15 p.m.•21 views

CVE-2026-0671

6.1CVSS5.8AI score0.00241EPSS

SaveExploits1References2

NVD•added 2026/01/08 5:15 p.m.•27 views

CVE-2026-0671

6.1CVSS0.00241EPSS

SaveExploits1References2

Cvelist•added 2026/01/08 4:21 p.m.•60 views

CVE-2026-0671 Multiple stored i18n/message-key XSSes in UploadWizard

0.00241EPSS

SaveExploits1References2

Vulnrichment•added 2026/01/08 4:21 p.m.•19 views

CVE-2026-0671 Multiple stored i18n/message-key XSSes in UploadWizard

5.8AI score0.00241EPSS

SaveExploits1References2

CNNVD•added 2026/01/08 12:00 a.m.•27 views

MediaWiki – UploadWizard Extension security vulnerability

MediaWiki - UploadWizard Extension is an open source file upload plugin for MediaWiki. A security vulnerability exists in MediaWiki - UploadWizard Extension versions 1.45, 1.44, 1.43, and 1.39, which stems from improper input neutralization and could lead to a cross-site scripting attack...

6.1CVSS5.4AI score0.00241EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2026/01/08 12:00 a.m.•13 views

CVE-2026-0671: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.8AI score0.00241EPSS

SaveExploits1References1

Positive Technologies•added 2026/01/08 12:00 a.m.•50 views

PT-2026-1967

Name of the Vulnerable Software and Affected Versions MediaWiki - UploadWizard extension versions 1.39 through 1.45 Description The MediaWiki - UploadWizard extension contains a flaw related to improper input neutralization during web page generation, which could allow for Cross-Site Scripting XS...

6.1CVSS5.8AI score0.00241EPSS

SaveExploits1References5

RedhatCVE•added 2025/10/20 7:28 p.m.•25 views

CVE-2025-62663

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...

6.9CVSS5.8AI score0.0051EPSS

SaveExploits0References1

NVD•added 2025/10/18 5:15 a.m.•22 views

CVE-2025-62663

6.9CVSS0.0051EPSS

SaveExploits0References2

CVE•added 2025/10/18 4:16 a.m.•35 views

CVE-2025-62663

CVE-2025-62663 is a Stored XSS in The Wikimedia Foundation MediaWiki UploadWizard extension. It arises from improper neutralization of input during web page generation, allowing stored XSS via system messages. Affected: UploadWizard extension, master branch prior to version 1.39. CVSS 4.0/6.9 bas...

6.9CVSS5.8AI score0.0051EPSS

SaveExploits0References2

Vulnrichment•added 2025/10/18 4:16 a.m.•8 views

CVE-2025-62663 Stored XSS through a system message in UploadWizard

6.9CVSS5.8AI score0.0051EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by