mediawiki

9 results · Clear filters · Feed

• Medium 5.9
  CVE-2026-58025 Public exploit

  Remote Code Execution via Unsafe Deserialization in LogItem Import

  Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects Me…

  Wikimedia Foundation MediaWiki mediawiki mediawiki Web / CMS Debian Ubuntu
  Jul 1, 2026
• None 0.0
  CVE-2025-61638 Public exploit

  Sanitizer::validateAttributes data-XSS

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid. This vulnerability is associated with program files includes/parser/Sanitizer.Php, src/C…

  Wikimedia Foundation MediaWiki Parsoid mediawiki Web / CMS Debian Ubuntu
  Feb 2, 2026
• Medium 6.1
  CVE-2019-11358 Public exploit EPSS 87%

  XSS in jQuery as used in Drupal, Backdrop CMS, and other products

  jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

  mediawiki mediawiki django drupal/core Debian Ubuntu Alpine npm Packagist Maven PyPI NuGet RubyGems
  Apr 19, 2019
• Unscored —
  CVE-2017-0372 Public exploit EPSS 11%

  Parameters injection in SyntaxHighlight results in multiple vulnerabilities

  Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.

  mediawiki mediawiki (SyntaxHighlight extension) mediawiki Web / CMS Debian
  Apr 13, 2018
• Unscored —
  CVE-2017-8809 Public exploit

  api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulner…

  mediawiki Web / CMS Debian
  Nov 15, 2017
• Unscored —
  CVE-2014-1610 Public exploit EPSS 43%

  MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support i…

  mediawiki Debian
  Jan 30, 2014
• Unscored —
  CVE-2012-2698 Public exploit

  Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.…

  mediawiki Debian
  Jun 29, 2012
• Unscored —
  CVE-2007-0177 Public exploit

  Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8…

  mediawiki Debian
  Jan 11, 2007
• Unscored —
  CVE-2004-1405 Public exploit

  MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, s…

  mediawiki Debian
  Feb 12, 2005