mediawiki Vulnerability Advisory Catalog

Total 451 security vulnerabilities recorded for mediawiki software and firmware.

← Back to All Vendors
Component: checkuser

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: checkuser

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. ...

📅 2026-02-03
CVSS 5.4 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue af...

📅 2026-02-03
CVSS 6.1 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 4.8 Dossier →
Component: mediawiki

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with prog...

📅 2026-02-03
CVSS 4.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia...

📅 2026-02-03
CVSS 4.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 4.8 Dossier →
Component: mediawiki

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vuln...

📅 2026-02-03
CVSS 4.8 Dossier →
Component: mediawiki

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Rest/Handler/PageHTMLHandler.Php. This ...

📅 2026-02-03
CVSS 3.1 Dossier →
CVE-2024-47849 CRITICAL
Component: cargo

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allow...

📅 2024-10-05
CVSS 9.8 Dossier →
Component: cargo

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Carg...

📅 2024-10-05
CVSS 6.1 Dossier →
Component: cargo

Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Med...

📅 2024-10-05
CVSS 8.8 Dossier →
Component: mediawiki

An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. An API ca...

📅 2024-10-04
CVSS 5.3 Dossier →
Component: mediawiki

An issue was discovered in the Foreground skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries....

📅 2024-07-07
CVSS 4.8 Dossier →
Component: mediawiki

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries....

📅 2024-07-07
CVSS 4.8 Dossier →
Component: mediawiki

An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a GET request...

📅 2024-07-07
CVSS 4.3 Dossier →
Component: mediawiki

An issue was discovered in the Tempo skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries....

📅 2024-07-07
CVSS 4.8 Dossier →
Component: mediawiki

An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules....

📅 2024-07-07
CVSS 6.5 Dossier →
Component: mediawiki

An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries....

📅 2024-07-07
CVSS 4.8 Dossier →
Page 3 of 19 (451 Total Records)