Vulnerabilities > Mediawiki > Mediawiki > 1.35.6

DATE CVE VULNERABILITY TITLE RISK
2022-09-29 CVE-2021-42045 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2.
network
low complexity
mediawiki CWE-79
5.4
2022-09-29 CVE-2021-42046 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2.
network
low complexity
mediawiki CWE-79
6.1
2022-09-29 CVE-2021-42047 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in the Growth extension in MediaWiki through 1.36.2.
network
low complexity
mediawiki CWE-79
5.4
2022-09-29 CVE-2021-42048 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in the Growth extension in MediaWiki through 1.36.2.
network
low complexity
mediawiki CWE-79
4.8
2022-09-29 CVE-2021-42049 Unspecified vulnerability in Mediawiki
An issue was discovered in the Translate extension in MediaWiki through 1.36.2.
network
low complexity
mediawiki
6.5
2022-07-02 CVE-2022-34911 Cross-site Scripting vulnerability in multiple products
An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1.
network
low complexity
mediawiki fedoraproject CWE-79
6.1
2022-07-02 CVE-2022-34912 An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1.
network
low complexity
mediawiki fedoraproject
6.1
2022-06-28 CVE-2022-34750 Allocation of Resources Without Limits or Throttling vulnerability in Mediawiki
An issue was discovered in MediaWiki through 1.38.1.
network
low complexity
mediawiki CWE-770
5.0
2022-04-29 CVE-2022-29906 Missing Authorization vulnerability in Mediawiki
The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check for the quizadmin user.
network
low complexity
mediawiki CWE-862
critical
9.8
2022-03-30 CVE-2022-28205 Unspecified vulnerability in Mediawiki
An issue was discovered in MediaWiki through 1.37.1.
network
low complexity
mediawiki
critical
9.8