Skip to content
OpenAdvisories
Critical WID-SEC-2026-3597 14 CVEs

MediaWiki Extensions: Mehrere Schwachstellen

Published Sep 27, 2026 · Updated Sep 27, 2026 · de-DE

Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MediaWiki Extensions ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.

Product

MediaWiki ist ein freies Wiki, das ursprünglich für den Einsatz auf Wikipedia entwickelt wurde.

Vulnerabilities 14

  • Critical 10.0
    CVE-2026-100382 Public exploit

    Unauthenticated remote code execution through wikitext in ExternalData

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This issue affects Mediawiki - ExternalData Extension: from * befo…

    Wikimedia Foundation Mediawiki - ExternalData Extension Web / CMS
  • High 7.5
    CVE-2026-57440

    Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

    The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, with $wgEmbedVideoRequireConsent disabled (not the default), the u…

    StarCitizenWiki mediawiki-extensions-EmbedVideo starcitizenwiki/embedvideo Web / CMS Packagist
  • Medium 6.9
    CVE-2026-100377

    Revision-deleted pages can be viewed through WikiLambda's action=edit and Special:ViewAbstract

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `maste…

    Wikimedia Foundation Mediawiki - WikiLambda Extension Web / CMS
  • Medium 6.9
    CVE-2026-96875 Public exploit

    Reflected XSS in Cargo Drilldown hierarchy filters

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

    The Wikimedia Foundation Mediawiki - Cargo extension Web / CMS
  • Medium 6.9
    CVE-2026-96876 Public exploit

    Anonymous reflected XSS in CargoExport invalid-alias errors

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

    The Wikimedia Foundation Mediawiki - Cargo extension Web / CMS
  • Medium 6.9
    CVE-2026-96877 Public exploit

    Reflected XSS through Cargo Drilldown full-text search

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

    The Wikimedia Foundation Mediawiki - Cargo extension Web / CMS
  • Medium 6.9
    CVE-2026-96878 Public exploit

    Cargo Exhibit field alias allows stored XSS

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

    The Wikimedia Foundation Mediawiki - Cargo extension Web / CMS
  • Medium 6.9
    CVE-2026-96879

    "Checked by" label in page history should not be shown if the underlying review log entry is suppressed"

    Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.

    The Wikimedia Foundation Mediawiki - FlaggedRevs extension Web / CMS
  • Medium 6.1
    CVE-2026-100237

    Stored i18n XSS in the Flow integration of Thanks

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension allows Stored XSS. This issue affects Mediawiki - Thanks Extension: from * before 1.43.10/1.45.5/1.46.1.

    The Wikimedia Foundation Mediawiki - Thanks Extension Web / CMS
  • Medium 5.3
    CVE-2026-100378

    Missing permission check in the Translate sandbox doRemind action

    Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from * before 1.46.1, 1.45.5, 1.43.10.

    Wikimedia Foundation Mediawiki - Translate Extension Web / CMS
  • Medium 5.3
    CVE-2026-100380 Public exploit

    Reflected XSS in Wikibase Special:SetLabel language validation

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Wikibase Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - Wikibase Extension: from * befor…

    Wikimedia Foundation Mediawiki - Wikibase Extension Web / CMS
  • Medium 5.3
    CVE-2026-100381 Public exploit

    UploadWizard Flickr collection and set titles allow DOM XSS

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - UploadWizard Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - UploadWizard Extension: from…

    Wikimedia Foundation Mediawiki - UploadWizard Extension Web / CMS
  • Medium 4.8
    CVE-2026-100376

    TemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefix

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - TemplateSandbox Extension…

    Wikimedia Foundation Mediawiki - TemplateSandbox Extension Web / CMS
  • Low 2.3
    CVE-2026-96874 Public exploit

    Stored XSS in Cargo Drilldown tab names

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in the Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.

    The Wikimedia Foundation Mediawiki - Cargo extension Web / CMS

Revision history

  1. #1

    Initiale Fassung

References