Skip to content
OpenAdvisories

Vendor

mediawiki

22 known vulnerabilities.

Products

mediawiki 18 CheckUser 1 mediawiki (SyntaxHighlight extension) 1 ProofreadPage 1 MassMessage 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2023-3550

    Stored XSS leads to privilege escalation in MediaWiki v1.40.0

    Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious lin…

    mediawiki mediawiki mediawiki mediawiki Web / CMS Debian Ubuntu