Skip to content
OpenAdvisories

Package · Packagist

mediawiki/cargo

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-62671

    Stored XSS through wikitext in Cargo

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master.

    The Wikimedia Foundation Mediawiki - Cargo extension mediawiki/cargo Web / CMS Packagist
  • Medium 6.9
    CVE-2024-47847

    Various XSSes found in Cargo

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.

    The Wikimedia Foundation Mediawiki - Cargo mediawiki/cargo Web / CMS Packagist
  • Medium 6.1
    CVE-2024-23173

    MediaWiki Cargo Extension Cross-site Scripting vulnerability

    An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in dri…

    mediawiki/cargo Packagist