Vulnerabilities > Mediawiki

DATE CVE VULNERABILITY TITLE RISK
2021-07-02 CVE-2021-36130 Cross-site Scripting vulnerability in Mediawiki
An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-79
4.8
2021-07-02 CVE-2021-36131 Cross-site Scripting vulnerability in Mediawiki
An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-79
4.8
2021-07-02 CVE-2021-36132 Incorrect Authorization vulnerability in Mediawiki
An issue was discovered in the FileImporter extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-863
8.8
2021-04-22 CVE-2021-31555 Improper Input Validation vulnerability in Mediawiki
An issue was discovered in the Oauth extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-20
7.5
2021-04-22 CVE-2021-31554 Incorrect Authorization vulnerability in Mediawiki
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-863
5.4
2021-04-22 CVE-2021-31553 Unquoted Search Path or Element vulnerability in Mediawiki
An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-428
6.5
2021-04-22 CVE-2021-31552 Incorrect Authorization vulnerability in Mediawiki
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-863
5.4
2021-04-22 CVE-2021-31551 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in the PageForms extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-79
6.1
2021-04-22 CVE-2021-31550 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-79
5.4
2021-04-22 CVE-2021-31549 Information Exposure vulnerability in Mediawiki
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2.
network
low complexity
mediawiki CWE-200
4.3