Approved changes feed: RSS · Atom

cpe:2.3:a:wikiworks:approved_revs:1.43:*:*:*:*:mediawiki:*:*

part: a version: 1.43 update: *

VendorWikiworks (06f89f5f-349d-5dd8-a51f-fabfd20e6526)
ProductApproved Revs (7056e972-fa83-50fd-bcd6-aa75518ec63f)
Edition*
Language*
Software edition*
Target softwaremediawiki
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wikimedia/mediawiki-extensions-approvedrevs purl2cpe 2026-06-01 10:15:55.425507

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22712 vulnerable 2026-06-08 07:51:13.677173 ApprovedRevs allows bypassing the inline CSS sanitizer
Improper Encoding or Escaping of Output due to magic word replacement in ParserAfterTidy vulnerability in The Wikimedia Foundation Mediawiki - ApprovedRevs Extension allows Input Data Manipulation.This issue affects Mediawiki - ApprovedRevs Extension: 1.45, 1.44, 1.43, 1.39.
Published: 2026-01-09T00:06:22.430Z
Updated: 2026-01-09T19:15:28.083Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.