Threat database

189 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.2%	CVE-2025-32074Mediawiki - Confirm Account Extension · Improper Encoding or Escaping of Output Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32074 Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Confirm Account Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Confirm Account Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-116	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32067Mediawiki - Growth Experiments Extension · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32067 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth Experiments Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Growth Experiments Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.3%	CVE-2025-32068Mediawiki - OAuth Extension · Incorrect Authorization Medium5.4EPSS 0.3%2025-04-11CVE Database V5CVE-2025-32068 Incorrect Authorization vulnerability in The Wikimedia Foundation Mediawiki - OAuth Extension allows Authentication Bypass.This issue affects Mediawiki - OAuth Extension: from 1.39 through 1.43. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-863	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32069Mediawiki - Wikibase Media Info Extension · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32069 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Media Info Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32070Mediawiki - AJAX Poll Extension · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32070 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32071Mediawiki - Wikidata Extension · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32071 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting (XSS) from widthheight message via ImageHandler::getDimensionsString()This issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Low	2.1	EPSS 0.4%	CVE-2025-32699MediaWiki · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Low2.1EPSS 0.4%2025-04-10CVE Database V5CVE-2025-32699 Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2. EPSS 0.4%Vulnerability Wikimedia Foundation #cwe-79 #cwe-74	CVE Database V5	2025-04-10
Low	2.1	EPSS 0.4%	CVE-2025-32698MediaWiki · Exposure of Sensitive Information to an Unauthorized Actor Low2.1EPSS 0.4%2025-04-10CVE Database V5CVE-2025-32698 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1. EPSS 0.4%Vulnerability Wikimedia Foundation #cwe-200	CVE Database V5	2025-04-10
Low	3.5	EPSS 0.3%	CVE-2025-23073Mediawiki - GlobalBlocking Extension · Exposure of Sensitive Information to an Unauthorized Actor Low3.5EPSS 0.3%2025-01-14CVE Database V5CVE-2025-23073 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension. EPSS 0.3%Vulnerability Wikimedia Foundation #cwe-200 #cwe-88	CVE Database V5	2025-01-14

Showing 181–189 of 189 results