Vulnerabilities > Mediawiki
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-06-29 | CVE-2023-37254 | Cross-site Scripting vulnerability in Mediawiki An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. | 6.1 |
2023-06-29 | CVE-2023-37255 | Cross-site Scripting vulnerability in Mediawiki An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. | 6.1 |
2023-06-29 | CVE-2023-37256 | Cross-site Scripting vulnerability in Mediawiki An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. | 6.1 |
2023-06-26 | CVE-2023-36675 | Cross-site Scripting vulnerability in Mediawiki An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. | 6.1 |
2023-05-29 | CVE-2022-41766 | Incorrect Permission Assignment for Critical Resource vulnerability in Mediawiki An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. | 4.3 |
2023-04-15 | CVE-2020-29007 | Code Injection vulnerability in Mediawiki Score The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. | 9.8 |
2023-04-15 | CVE-2021-30153 | Exposure of Resource to Wrong Sphere vulnerability in Mediawiki An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35.2. | 4.3 |
2023-03-31 | CVE-2023-29141 | An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. | 9.8 |
2023-02-05 | CVE-2017-20175 | Cross-site Scripting vulnerability in Mediawiki Matomo 2.4.0/2.4.1/2.4.2 A vulnerability classified as problematic has been found in DaSchTour matomo-mediawiki-extension up to 2.4.2 on MediaWiki. | 6.1 |
2023-01-20 | CVE-2022-39193 | Information Exposure vulnerability in Mediawiki 1.39.0/1.39.1 An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. | 5.3 |