Approved changes feed: RSS · Atom
cpe:2.3:a:wikimedia_foundation:mediawiki:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wikimedia Foundation (f7943c01-50f6-53ec-b645-b355c8f75e02) |
|---|---|
| Product | Mediawiki (4814854a-3f8d-5609-ad81-927bc58f94a2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58035 |
vulnerable | 2026-07-29 01:03:16.592011 |
Stored XSS through a system message in the codex version of Special:Block
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki.
This vulnerability is associated with program files resources/src/mediawiki.Special.Block/SpecialBlock.Vue.
Published: 2026-07-01T14:17:41.643Z
Updated: 2026-07-01T14:54:43.230Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58033 |
vulnerable | 2026-07-29 01:03:16.589825 |
"Total number of distinct authors" statistic at action=info does not exclude revisions where the author name was deleted
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.
This vulnerability is associated with program files includes/Actions/InfoAction.Php.
This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
Published: 2026-07-01T14:54:15.263Z
Updated: 2026-07-01T15:48:16.722Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58032 |
vulnerable | 2026-07-29 01:03:16.589577 |
mw.Api.getErrorMessage() may return injected HTML if used without errorformat=html
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki.
This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js.
This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
Published: 2026-07-01T14:56:27.223Z
Updated: 2026-07-01T15:48:38.393Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58031 |
vulnerable | 2026-07-29 01:03:16.589276 |
Stored i18n XSS in Special:ApiSandbox when a deprecated module is selected
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki.
This vulnerability is associated with program files resources/src/mediawiki.Special.Apisandbox/ApiSandboxLayout.Js.
This issue affects MediaWiki: from 1.46.0-rc.0 before 1.46.0.
Published: 2026-07-01T14:24:21.084Z
Updated: 2026-07-01T14:45:46.186Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58029 |
vulnerable | 2026-07-29 01:03:16.586122 |
Full Account Takeover from BotPasswords and OAuth via action=changeauthenticationdata
Vulnerability in Wikimedia Foundation MediaWiki.
This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php, includes/Specials/SpecialUnlinkAccounts.Php.
This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
Published: 2026-07-01T15:19:11.810Z
Updated: 2026-07-01T15:51:32.133Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58028 |
vulnerable | 2026-07-29 01:03:16.577022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58026 |
vulnerable | 2026-07-29 01:03:16.575313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58025 |
vulnerable | 2026-07-29 01:03:16.574981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34095 |
vulnerable | 2026-06-08 07:59:11.804529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34094 |
vulnerable | 2026-06-08 07:59:11.804228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34093 |
vulnerable | 2026-06-08 07:59:11.803905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34092 |
vulnerable | 2026-06-08 07:59:11.803582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34091 |
vulnerable | 2026-06-08 07:59:11.803144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34088 |
vulnerable | 2026-06-08 07:59:11.799018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6927 |
vulnerable | 2026-06-08 07:43:16.661772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6597 |
vulnerable | 2026-06-08 07:43:15.520351 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6594 |
vulnerable | 2026-06-08 07:43:15.517055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6593 |
vulnerable | 2026-06-08 07:43:15.516759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6591 |
vulnerable | 2026-06-08 07:43:15.514397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6590 |
vulnerable | 2026-06-08 07:43:15.514078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6589 |
vulnerable | 2026-06-08 07:43:15.513612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67484 |
vulnerable | 2026-06-08 07:41:19.876134 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67483 |
vulnerable | 2026-06-08 07:41:19.875748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67481 |
vulnerable | 2026-06-08 07:41:19.871439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67480 |
vulnerable | 2026-06-08 07:41:19.870938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67479 |
vulnerable | 2026-06-08 07:41:19.869435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67477 |
vulnerable | 2026-06-08 07:41:19.864713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67476 |
vulnerable | 2026-06-08 07:41:19.864213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67475 |
vulnerable | 2026-06-08 07:41:19.861417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61646 |
vulnerable | 2026-06-08 07:37:27.873912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61645 |
vulnerable | 2026-06-08 07:37:27.873463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61644 |
vulnerable | 2026-06-08 07:37:27.873173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61643 |
vulnerable | 2026-06-08 07:37:27.872617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61642 |
vulnerable | 2026-06-08 07:37:27.872114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61641 |
vulnerable | 2026-06-08 07:37:27.869095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61640 |
vulnerable | 2026-06-08 07:37:27.868617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61639 |
vulnerable | 2026-06-08 07:37:27.868263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61638 |
vulnerable | 2026-06-08 07:37:27.864451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61637 |
vulnerable | 2026-06-08 07:37:27.864067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61636 |
vulnerable | 2026-06-08 07:37:27.863708 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61634 |
vulnerable | 2026-06-08 07:37:27.861128 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3469 |
vulnerable | 2026-06-08 07:23:08.957260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32700 |
vulnerable | 2026-06-08 07:19:00.414383 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32699 |
vulnerable | 2026-06-08 07:19:00.412767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32698 |
vulnerable | 2026-06-08 07:19:00.412465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32697 |
vulnerable | 2026-06-08 07:19:00.412014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32696 |
vulnerable | 2026-06-08 07:19:00.411651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11261 |
vulnerable | 2026-06-08 07:02:28.503852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6455 |
vulnerable | 2026-06-08 05:04:56.921277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6451 |
vulnerable | 2026-06-08 05:04:56.918974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4572 |
vulnerable | 2026-06-08 05:04:48.294019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4303 |
vulnerable | 2026-06-08 05:04:35.378449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.