Approved changes feed: RSS · Atom

cpe:2.3:a:wikimedia_foundation:mediawiki_-_ipinfo_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWikimedia Foundation (f7943c01-50f6-53ec-b645-b355c8f75e02)
ProductMediawiki Ipinfo Extension (8f341a8e-197d-57b9-a742-2162f11c3488)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-53482 vulnerable 2026-06-03 15:03:54.141649 IPInfo: Message key XSS through several IPInfo messages in infobox and popup
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
Published: 2025-07-04T16:01:46.252Z
Updated: 2025-07-08T17:38:20.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53481 vulnerable 2026-06-03 15:03:54.141313 Denial of service vector on ipinfo/v0/norevision
Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Excessive Allocation.This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
Published: 2025-07-04T15:47:46.299Z
Updated: 2025-07-08T17:38:27.242Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.