Approved changes feed: RSS · Atom

cpe:2.3:a:the_wikimedia_foundation:mediawiki_-_wikidata_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Wikimedia Foundation (dcdf6756-005f-5e7c-83d8-02490e2a2a68)
ProductMediawiki Wikidata Extension (0334f600-e387-5810-a976-2dfb46555d2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32071 vulnerable 2026-06-03 15:00:39.884630 Wikibase CommonsInlineImageFormatter: i18n XSS
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting (XSS) from widthheight message via ImageHandler::getDimensionsString()This issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43.
Published: 2025-04-11T16:19:46.163Z
Updated: 2025-07-07T14:17:52.085Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.