Vulnerabilities > Mediawiki > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-01-10 CVE-2023-22909 An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1.
network
low complexity
mediawiki fedoraproject
5.3
2023-01-10 CVE-2023-22911 Cross-site Scripting vulnerability in multiple products
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1.
network
low complexity
mediawiki fedoraproject CWE-79
6.1
2022-12-26 CVE-2021-44856 Improper Check for Unusual or Exceptional Conditions vulnerability in Mediawiki
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1.
network
low complexity
mediawiki CWE-754
5.3
2022-12-26 CVE-2022-41765 Information Exposure Through Discrepancy vulnerability in Mediawiki
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3.
network
low complexity
mediawiki CWE-203
5.3
2022-12-26 CVE-2022-41767 Unspecified vulnerability in Mediawiki
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3.
network
low complexity
mediawiki
5.3
2022-12-26 CVE-2021-44854 Unspecified vulnerability in Mediawiki
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1.
network
low complexity
mediawiki
5.3
2022-12-26 CVE-2021-44855 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1.
network
low complexity
mediawiki CWE-79
5.4
2022-12-16 CVE-2022-4561 Improper Enforcement of Message or Data Structure vulnerability in Mediawiki Semantic Drilldown
A vulnerability classified as problematic has been found in SemanticDrilldown Extension.
network
low complexity
mediawiki CWE-707
6.1
2022-09-29 CVE-2021-42045 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2.
network
low complexity
mediawiki CWE-79
5.4
2022-09-29 CVE-2021-42046 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2.
network
low complexity
mediawiki CWE-79
6.1