Vulnerabilities > Mediawiki > Mediawiki > 1.37.1

DATE CVE VULNERABILITY TITLE RISK
2022-04-29 CVE-2022-29907 Cross-site Scripting vulnerability in Mediawiki
The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages.
network
mediawiki CWE-79
4.3
2022-03-30 CVE-2022-28205 Unspecified vulnerability in Mediawiki
An issue was discovered in MediaWiki through 1.37.1.
network
low complexity
mediawiki
critical
9.8
2022-03-30 CVE-2022-28206 Unspecified vulnerability in Mediawiki
An issue was discovered in MediaWiki through 1.37.1.
network
low complexity
mediawiki
critical
9.8
2022-03-30 CVE-2022-28209 Unspecified vulnerability in Mediawiki
An issue was discovered in Mediawiki through 1.37.1.
network
low complexity
mediawiki
critical
9.8
2022-03-30 CVE-2022-28202 Cross-site Scripting vulnerability in multiple products
An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2.
network
low complexity
mediawiki fedoraproject debian CWE-79
6.1