Skip to content
OpenAdvisories
High · 7.5 CVE-2026-0669 EUVD-2026-1175GHSA-78qj-mxw5-p7qp

Path Traversal vulnerability in CSS extension on certain web servers

Published Jan 7, 2026 · Updated Jan 7, 2026 · Assigned by wikimedia-foundation

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wikimedia Foundation MediaWiki - CSS extension allows Path Traversal.This issue affects MediaWiki - CSS extension: 1.44, 1.43, 1.39.

Affected products

VendorProductAffectedFixed
Wikimedia Foundation MediaWiki - CSS extension 1.44, 1.43, 1.39 —

Advisories 1

References