Mediawiki Cargo Extension
Approved changes feed: RSS · Atom
cpe:2.3:a:the_wikimedia_foundation:mediawiki_-_cargo_extension:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | The Wikimedia Foundation (dcdf6756-005f-5e7c-83d8-02490e2a2a68) |
|---|---|
| Product | Mediawiki Cargo Extension (9c105522-4a58-57a3-affc-90086965a2e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58521 |
vulnerable | 2026-07-29 01:03:16.891177 |
SQLi in Cargo extension via year range filter
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection.
This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.
Published: 2026-07-01T17:30:50.009Z
Updated: 2026-07-01T17:58:23.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58519 |
vulnerable | 2026-07-29 01:03:16.887513 |
Stored XSS through Cargo's map format
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.
This issue affects Mediawiki - Cargo Extension: from * before 3.9.1.
Published: 2026-07-01T03:59:33.932Z
Updated: 2026-07-01T12:29:57.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14363 |
vulnerable | 2026-07-29 00:26:16.956980 |
Cargo Extension: SQLi in Special:Drilldown
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection.
This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.
Published: 2026-07-01T19:22:33.373Z
Updated: 2026-07-02T13:10:36.142Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62671 |
vulnerable | 2026-06-08 07:39:16.400217 |
Stored XSS through wikitext in Cargo
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master.
Published: 2025-10-18T04:24:35.915Z
Updated: 2025-10-20T16:30:37.642Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.