Approved changes feed: RSS · Atom

cpe:2.3:a:wikisource:proofread_page:1.43:*:*:*:*:mediawiki:*:*

part: a version: 1.43 update: *

VendorWikisource (d29678e3-0fa5-5656-b0bd-f75b1043741a)
ProductProofread Page (01baf6e1-95e6-57e2-af50-d5e64004aeb3)
Edition*
Language*
Software edition*
Target softwaremediawiki
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wikimedia/mediawiki-extensions-proofreadpage purl2cpe 2026-06-01 10:17:41.978272

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0670 vulnerable 2026-06-08 07:47:12.882102 Stored XSS through a system message and a user-provided parameter in ProofreadPage
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39.
Published: 2026-01-07T18:55:42.559Z
Updated: 2026-01-07T19:25:36.796Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.