Mediawiki Extensions Tabberneue
Approved changes feed: RSS · Atom
cpe:2.3:a:starcitizentools:mediawiki-extensions-tabberneue:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Starcitizentools (045f9d09-735b-58be-aa56-0b4351637409) |
|---|---|
| Product | Mediawiki Extensions Tabberneue (7316b4e3-9f48-5514-8691-9af0bd912a55) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-53093 |
vulnerable | 2026-06-08 07:31:13.932136 |
TabberNeue vulnerable to Stored XSS through wikitext
HIGH (8.6)
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the `<tabber>` tag. Version 3.1.1 contains a patch for the bug.
Published: 2025-06-27T17:43:24.107Z
Updated: 2025-06-27T17:56:37.678Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21612 |
vulnerable | 2026-06-08 07:08:57.039544 |
Cross-site Scripting in TabberTransclude in Extension:TabberNeue
HIGH (8.6)
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when outputting, so an XSS payload as the page name can be used here. This vulnerability is fixed in 2.7.2.
Published: 2025-01-06T15:47:27.214Z
Updated: 2025-08-26T19:48:04.827Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.