Approved changes feed: RSS · Atom

cpe:2.3:a:the_wikimedia_foundation:mediawiki_-_campaignevents_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Wikimedia Foundation (dcdf6756-005f-5e7c-83d8-02490e2a2a68)
ProductMediawiki Campaignevents Extension (0e9e7c8a-b46f-5da0-85fb-98e258114b7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39935 vulnerable 2026-06-03 15:22:13.293686 XSS-via-i18n in localised wiki names
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-Site Scripting (XSS). This issue was remediated only on the `master` branch.
Published: 2026-04-07T22:04:02.098Z
Updated: 2026-04-08T22:06:48.795Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.