Approved changes feed: RSS · Atom

cpe:2.3:a:the_wikimedia_foundation:mediawiki_-_wikilove_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Wikimedia Foundation (dcdf6756-005f-5e7c-83d8-02490e2a2a68)
ProductMediawiki Wikilove Extension (05e52978-acad-5699-8955-4f2afddcaa34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22711 not_vulnerable 2026-06-03 15:15:53.978630 Stored XSS through system messages in WikiLove
Improper neutralization of alternate XSS syntax vulnerability in The Wikimedia Foundation Mediawiki - Wikilove Extension allows Cross-Site Scripting (XSS).The issue has been remediated on the `master` branch, and in the release branches for MediaWiki versions 1.43, 1.44, and 1.45.
Published: 2026-04-07T18:39:37.410Z
Updated: 2026-04-08T22:02:16.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62694 vulnerable 2026-06-03 15:09:35.044179 Stored XSS through a system message
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - WikiLove Extension allows Stored XSS.This issue affects Mediawiki - WikiLove Extension: 1.39.
Published: 2025-10-21T04:28:14.618Z
Updated: 2025-10-21T19:49:02.351Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.