Approved changes feed: RSS · Atom

cpe:2.3:a:wikimedia:wikibase:1.39:*:*:*:*:mediawiki:*:*

part: a version: 1.39 update: *

VendorWikimedia (15e2dd53-d178-575c-9871-f6b2d83e2814)
ProductWikibase (3cf1cab9-59c9-54f9-ac0b-cf9d6e0958ac)
Edition*
Language*
Software edition*
Target softwaremediawiki
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wikimedia/mediawiki-extensions-wikibase purl2cpe 2026-06-01 10:12:41.959328

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22710 vulnerable 2026-06-03 15:15:53.975322 Stored XSS through autocomment system messages in Wikibase
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Extension: 1.45, 1.44, 1.43, 1.39.
Published: 2026-01-08T23:48:51.645Z
Updated: 2026-01-09T19:16:54.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.