Skip to content
OpenAdvisories

Vendor

weirdgloop

2 known vulnerabilities.

Products

mediawiki-extensions-Bucket 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-30917

    Stored XSS on Bucket namespace pages

    Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a PAGE type, which will execute whenever a user views that table's corresponding Bucket namesp…

    weirdgloop mediawiki-extensions-Bucket Web / CMS