Mediawiki

Mediawiki

418 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2026-14358

  • EPSS 0.15%
  • Veröffentlicht 01.07.2026 19:16:50
  • Zuletzt bearbeitet 09.07.2026 18:44:46

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Charts Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - Charts Extension: from * be...

4.3

CVE-2026-58517

  • EPSS 0.21%
  • Veröffentlicht 01.07.2026 18:23:02
  • Zuletzt bearbeitet 10.07.2026 13:50:41

Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.

6.1

CVE-2026-58520

  • EPSS 0.15%
  • Veröffentlicht 01.07.2026 17:14:06
  • Zuletzt bearbeitet 09.07.2026 18:45:14

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from * before 1.43.9, 1.44.6, 1.45.4.

9.8

CVE-2026-58025

  • EPSS 0.5%
  • Veröffentlicht 01.07.2026 15:23:29
  • Zuletzt bearbeitet 09.07.2026 19:34:14

Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This is...

6.5

CVE-2026-58029

  • EPSS 0.33%
  • Veröffentlicht 01.07.2026 15:19:11
  • Zuletzt bearbeitet 09.07.2026 19:37:39

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/Spec...

5.4

CVE-2026-58028

  • EPSS 0.23%
  • Veröffentlicht 01.07.2026 15:15:17
  • Zuletzt bearbeitet 09.07.2026 19:37:07

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiForma...

5.7

CVE-2026-58026

  • EPSS 0.33%
  • Veröffentlicht 01.07.2026 15:10:34
  • Zuletzt bearbeitet 09.07.2026 19:34:47

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Parser.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45....

8.8

CVE-2026-8857

Exploit
  • EPSS 0.33%
  • Veröffentlicht 01.07.2026 15:08:49
  • Zuletzt bearbeitet 09.07.2026 17:20:24

A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Php. This issue affects timeline: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

6.1

CVE-2026-58038

  • EPSS 0.14%
  • Veröffentlicht 01.07.2026 15:04:01
  • Zuletzt bearbeitet 09.07.2026 19:46:55

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files includes/Timeline.Php, scripts/EasyTimeline.Pl. This ...

6.5

CVE-2026-58027

  • EPSS 0.37%
  • Veröffentlicht 01.07.2026 15:01:00
  • Zuletzt bearbeitet 09.07.2026 19:35:02

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1...