Threat database

189 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.9	EPSS 0.4%	CVE-2025-62702Mediawiki - PageTriage Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.4%2025-10-21CVE Database V5CVE-2025-62702 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - PageTriage Extension allows Stored XSS.This issue affects Mediawiki - PageTriage Extension: from master before 1.44. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-21
Medium	6.9	EPSS 0.5%	CVE-2025-62694Mediawiki - WikiLove Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.5%2025-10-21CVE Database V5CVE-2025-62694 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - WikiLove Extension allows Stored XSS.This issue affects Mediawiki - WikiLove Extension: 1.39. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-21
Medium	6.9	EPSS 0.4%	CVE-2025-62695Mediawiki - WikiLambda Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.4%2025-10-21CVE Database V5CVE-2025-62695 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-21
Medium	6.9	EPSS 1.4%	CVE-2025-62696Mediawiki Foundation - Springboard Extension · Command Injection Medium6.9EPSS 1.4%2025-10-21CVE Database V5CVE-2025-62696 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in The Wikimedia Foundation Mediawiki Foundation - Springboard Extension allows Command Injection.This issue affects Mediawiki Foundation - Springboard Extension: master. EPSS 1.4%Vulnerability The Wikimedia Foundation #cwe-77	CVE Database V5	2025-10-21
Medium	6.9	EPSS 0.4%	CVE-2025-62699Mediawiki - Translate Extension · Exposure of Sensitive Information to an Unauthorized Actor Medium6.9EPSS 0.4%2025-10-21CVE Database V5CVE-2025-62699 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - Translate Extension allows Footprinting. Translate extension appears to use jobs to make edits to translation pages. This causes the CheckUser tool to log the wrong IP and User-Agent making these edits un-auditable via the CheckUser tool.This issue affects Mediawiki - Translate Extension: from master before 1.39. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-200	CVE Database V5	2025-10-21
High	7.5	EPSS 0.2%	CVE-2025-62658MediaWiki WatchAnalytics extension · SQL Injection High7.5EPSS 0.2%2025-10-20CVE Database V5CVE-2025-62658 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44. EPSS 0.2%Vulnerability The Wikimedia Foundation #cwe-89	CVE Database V5	2025-10-20
Medium	5.8	EPSS 0.3%	CVE-2025-62657MediaWiki PageForms extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.8EPSS 0.3%2025-10-20CVE Database V5CVE-2025-62657 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-20
Medium	5.8	EPSS 0.3%	CVE-2025-62656MediaWiki GlobalBlocking extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.8EPSS 0.3%2025-10-20CVE Database V5CVE-2025-62656 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-20
High	8.8	EPSS 0.3%	CVE-2025-62697Mediawiki - LanguageSelector Extension · Injection High8.8EPSS 0.3%2025-10-20CVE Database V5CVE-2025-62697 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-74	CVE Database V5	2025-10-20
Medium	6.9	EPSS 0.3%	CVE-2025-62698Mediawiki - ExternalGuidance · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.3%2025-10-20CVE Database V5CVE-2025-62698 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - ExternalGuidance allows Stored XSS.This issue affects Mediawiki - ExternalGuidance: from master before 1.39. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-20
Medium	6.9	EPSS 0.3%	CVE-2025-62700Mediawiki - MultiBoilerplate Extensionmaste · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.3%2025-10-20CVE Database V5CVE-2025-62700 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - MultiBoilerplate Extensionmaste allows Stored XSS.This issue affects Mediawiki - MultiBoilerplate Extensionmaste: from master before 1.39. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-20
Medium	6.9	EPSS 0.3%	CVE-2025-62693Mediawiki - LastModified Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.3%2025-10-20CVE Database V5CVE-2025-62693 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39. EPSS 0.3%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-20
Medium	6.9	EPSS 0.4%	CVE-2025-11937Mediawiki - SecurePoll Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.4%2025-10-18CVE Database V5CVE-2025-11937 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - SecurePoll Extension allows Stored XSS.This issue affects Mediawiki - SecurePoll Extension: master. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.4%	CVE-2025-62666Mediawiki - CirrusSearch Extension · Allocation of Resources Without Limits or Throttling Medium6.9EPSS 0.4%2025-10-18CVE Database V5CVE-2025-62666 Allocation of Resources Without Limits or Throttling vulnerability in The Wikimedia Foundation Mediawiki - CirrusSearch Extension allows HTTP DoS.This issue affects Mediawiki - CirrusSearch Extension: from master before 1.43. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-770	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.4%	CVE-2025-62667Mediawiki - GrowthExperiments Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.4%2025-10-18CVE Database V5CVE-2025-62667 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Stored XSS.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.4%	CVE-2025-62668Mediawiki - GrowthExperiments Extension · Incorrect Default Permissions Medium6.9EPSS 0.4%2025-10-18CVE Database V5CVE-2025-62668 Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39. EPSS 0.4%Vulnerability The Wikimedia Foundation #cwe-276	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.5%	CVE-2025-62669Mediawiki - CentralAuth Extension · Exposure of Sensitive Information to an Unauthorized Actor Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62669 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-200	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.5%	CVE-2025-62670Mediawiki - FlexDiagrams Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62670 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - FlexDiagrams Extension allows Stored XSS.This issue affects Mediawiki - FlexDiagrams Extension: master. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.5%	CVE-2025-62671Mediawiki - Cargo Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62671 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18
Medium	6.9	EPSS 0.5%	CVE-2025-62662Mediawiki - AdvancedSearch Extension · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.9EPSS 0.5%2025-10-18CVE Database V5CVE-2025-62662 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - AdvancedSearch Extension allows Stored XSS.This issue affects Mediawiki - AdvancedSearch Extension: from master before 1.39. EPSS 0.5%Vulnerability The Wikimedia Foundation #cwe-79	CVE Database V5	2025-10-18

Showing 121–140 of 189 results