CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

23 matches found

Kitploit•added 2026/10/03 5:33 p.m.•9 views

CVE-2026-100381

CVE-2026-100381: DOM XSS in Flickr collection and set titles Reporter: Marco Paciaroni BomboBombone. UploadWizard inserted Flickr collection and set titles through an API that interpreted strings as HTML. External title metadata could therefore become executable markup in the wiki page. Affected...

5.3CVSS6.2AI score0.0033EPSS

SaveExploits0References1

EUVD•added 2026/09/26 12:32 a.m.•11 views

EUVD-2026-87347

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UploadWizard Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - UploadWizard Extension: from before 1.46.1, 1.45.5, 1.43.10...

5.3CVSS5.8AI score0.0033EPSS

SaveExploits0References3

NVD•added 2026/09/25 10:17 p.m.•19 views

CVE-2026-100381

5.3CVSS0.0033EPSS

SaveExploits0References2

Vulnrichment•added 2026/09/25 9:00 p.m.•14 views

CVE-2026-100381 UploadWizard Flickr collection and set titles allow DOM XSS

5.3CVSS5.8AI score0.0033EPSS

SaveExploits0References2

CVE•added 2026/09/25 9:00 p.m.•9 views

CVE-2026-100381

The Wikimedia Foundation Mediawiki - UploadWizard Extension is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the Flickr collection and set titles allow for DOM XSS . This issue affects versions prior to 1.46.1 , 1.45.5 ,...

5.3CVSS5.8AI score0.0033EPSS

SaveExploits0References2

Cvelist•added 2026/09/25 9:00 p.m.•28 views

CVE-2026-100381 UploadWizard Flickr collection and set titles allow DOM XSS

5.3CVSS0.0033EPSS

SaveExploits0References2

Positive Technologies•added 2026/09/25 12:00 a.m.•5 views

PT-2026-99125

Name of the Vulnerable Software and Affected Versions Mediawiki - UploadWizard Extension versions prior to 1.46.1 Mediawiki - UploadWizard Extension version 1.45.5 Mediawiki - UploadWizard Extension version 1.43.10 Description Improper neutralization of input during web page generation allows for...

5.3CVSS5.8AI score0.0033EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2026/09/25 12:00 a.m.•5 views

CVE-2026-100381: Improper Neutralization of Input During Web Page Generation

5.3CVSS5.9AI score0.0033EPSS

SaveExploits0References2

RedhatCVE•added 2026/01/10 5:41 a.m.•18 views

CVE-2026-0671

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting XSS.This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39...

6.1CVSS5.9AI score0.00241EPSS

SaveExploits1References1

OSV•added 2026/01/08 5:15 p.m.•17 views

CVE-2026-0671

6.1CVSS5.8AI score0.00241EPSS

SaveExploits1References2

NVD•added 2026/01/08 5:15 p.m.•23 views

CVE-2026-0671

6.1CVSS0.00241EPSS

SaveExploits1References2

Vulnrichment•added 2026/01/08 4:21 p.m.•17 views

CVE-2026-0671 Multiple stored i18n/message-key XSSes in UploadWizard

5.8AI score0.00241EPSS

SaveExploits1References2

Cvelist•added 2026/01/08 4:21 p.m.•53 views

CVE-2026-0671 Multiple stored i18n/message-key XSSes in UploadWizard

0.00241EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2026/01/08 12:00 a.m.•6 views

CVE-2026-0671: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.8AI score0.00241EPSS

SaveExploits1References1

CNNVD•added 2026/01/08 12:00 a.m.•24 views

MediaWiki - UploadWizard Extension 安全漏洞

MediaWiki - UploadWizard Extension is an open source file upload plugin for MediaWiki. A security vulnerability exists in MediaWiki - UploadWizard Extension versions 1.45, 1.44, 1.43, and 1.39, which stems from improper input neutralization and could lead to a cross-site scripting attack...

6.1CVSS6.2AI score0.00241EPSS

SaveExploits1References3

Positive Technologies•added 2026/01/08 12:00 a.m.•44 views

PT-2026-1967

Name of the Vulnerable Software and Affected Versions MediaWiki - UploadWizard extension versions 1.39 through 1.45 Description The MediaWiki - UploadWizard extension contains a flaw related to improper input neutralization during web page generation, which could allow for Cross-Site Scripting XS...

6.1CVSS6AI score0.00241EPSS

SaveExploits1References5

RedhatCVE•added 2025/10/20 7:28 p.m.•22 views

CVE-2025-62663

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...

6.9CVSS5.8AI score0.00449EPSS

SaveExploits0References1

NVD•added 2025/10/18 5:15 a.m.•19 views

CVE-2025-62663

6.9CVSS0.00449EPSS

SaveExploits0References2

Cvelist•added 2025/10/18 4:16 a.m.•24 views

CVE-2025-62663 Stored XSS through a system message in UploadWizard

6.9CVSS0.00449EPSS

SaveExploits0References2

Vulnrichment•added 2025/10/18 4:16 a.m.•5 views

CVE-2025-62663 Stored XSS through a system message in UploadWizard

6.9CVSS5.8AI score0.00449EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by