Vulnerabilities > Mediawiki > Mediawiki > 1.31.15

DATE CVE VULNERABILITY TITLE RISK
2021-07-02 CVE-2021-36128 Improper Handling of Exceptional Conditions vulnerability in Mediawiki
An issue was discovered in the CentralAuth extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-755
critical
9.8
2021-07-02 CVE-2021-36129 Incorrect Permission Assignment for Critical Resource vulnerability in Mediawiki
An issue was discovered in the Translate extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-732
4.3
2021-07-02 CVE-2021-36130 Cross-site Scripting vulnerability in Mediawiki
An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-79
4.8
2021-07-02 CVE-2021-36131 Cross-site Scripting vulnerability in Mediawiki
An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-79
4.8
2021-07-02 CVE-2021-36132 Incorrect Authorization vulnerability in Mediawiki
An issue was discovered in the FileImporter extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-863
8.8
2021-04-22 CVE-2021-31555 Improper Input Validation vulnerability in Mediawiki
An issue was discovered in the Oauth extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-20
7.5
2021-04-22 CVE-2021-31554 Incorrect Authorization vulnerability in Mediawiki
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-863
5.4
2021-04-22 CVE-2021-31553 Unquoted Search Path or Element vulnerability in Mediawiki
An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-428
6.5
2021-04-22 CVE-2021-31552 Incorrect Authorization vulnerability in Mediawiki
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-863
5.4
2021-04-22 CVE-2021-31551 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in the PageForms extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-79
6.1