Threat database

79 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.9	EPSS 0.5%	CVE-2025-62669Mediawiki - CentralAuth Extension · Exposure of Sensitive Information to an Unauthorized Actor Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62669 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-200	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.5%	CVE-2025-62670Mediawiki - FlexDiagrams Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62670 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - FlexDiagrams Extension allows Stored XSS.This issue affects Mediawiki - FlexDiagrams Extension: master. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.5%	CVE-2025-62671Mediawiki - Cargo Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62671 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.5%	CVE-2025-62662Mediawiki - AdvancedSearch Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62662 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - AdvancedSearch Extension allows Stored XSS.This issue affects Mediawiki - AdvancedSearch Extension: from master before 1.39. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.5%	CVE-2025-62663Mediawiki - UploadWizard Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62663 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.4%	CVE-2025-62664Mediawiki - ImageRating Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.4%2025-10-18CVE Database V5CVE-2025-62664 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - ImageRating Extension allows Stored XSS.This issue affects Mediawiki - ImageRating Extension: from master before 1.39. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Low	2.1	EPSS 0.3%	CVE-2025-62655MediaWiki Cargo extension · SQL Injection Low2.1EPSS 0.3%2025-10-17CVE Database V5CVE-2025-62655 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-89	CVE Database V5	2025-10-17
Low	2.0	EPSS 0.3%	CVE-2025-62654MediaWiki QuizGame extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Low2.0EPSS 0.3%2025-10-17CVE Database V5CVE-2025-62654 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-17
Low	2.0	EPSS 0.3%	CVE-2025-62653MediaWiki PollNY extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Low2.0EPSS 0.3%2025-10-17CVE Database V5CVE-2025-62653 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-17
Medium	5.8	EPSS 0.4%	CVE-2025-62652MediaWiki WebAuthn extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.8EPSS 0.4%2025-10-17CVE Database V5CVE-2025-62652 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-17
Medium	6.5	EPSS 0.4%	CVE-2025-32079Mediawiki - GrowthExperiments · Improper Input Validation Medium6.5EPSS 0.4%2025-04-11CVE Database V5CVE-2025-32079 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments allows HTTP DoS.This issue affects Mediawiki - GrowthExperiments: from 1.39 through 1.43. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Medium	6.9	EPSS 0.5%	CVE-2025-32072Mediawiki Core - Feed Utils · Improper Encoding or Escaping of Output Medium6.9EPSS 0.5%2025-04-11CVE Database V5CVE-2025-32072 Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki Core - Feed Utils allows WebView Injection.This issue affects Mediawiki Core - Feed Utils: from 1.39 through 1.43. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-116	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32073Mediawiki - HTML Tags · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32073 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - HTML Tags allows Cross-Site Scripting (XSS).This issue affects Mediawiki - HTML Tags: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32074Mediawiki - Confirm Account Extension · Improper Encoding or Escaping of Output Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32074 Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Confirm Account Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Confirm Account Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-116	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32067Mediawiki - Growth Experiments Extension · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32067 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth Experiments Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Growth Experiments Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.3%	CVE-2025-32068Mediawiki - OAuth Extension · Incorrect Authorization Medium5.4EPSS 0.3%2025-04-11CVE Database V5CVE-2025-32068 Incorrect Authorization vulnerability in The Wikimedia Foundation Mediawiki - OAuth Extension allows Authentication Bypass.This issue affects Mediawiki - OAuth Extension: from 1.39 through 1.43. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-863	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32069Mediawiki - Wikibase Media Info Extension · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32069 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Media Info Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32070Mediawiki - AJAX Poll Extension · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32070 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11
Medium	5.4	EPSS 0.2%	CVE-2025-32071Mediawiki - Wikidata Extension · Improper Input Validation Medium5.4EPSS 0.2%2025-04-11CVE Database V5CVE-2025-32071 Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting (XSS) from widthheight message via ImageHandler::getDimensionsString()This issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-20	CVE Database V5	2025-04-11

Showing 61–79 of 79 results