the wikimedia foundation
Web & CMS Pluginsoss-project
Latest CVEs
The 15 most recently published vulnerabilities affecting the wikimedia foundation.
- CVE-2026-22712ApprovedRevs allows bypassing the inline CSS sanitizer4.3
- CVE-2026-22713Stored XSS through edit summaries in GrowthExperiments5.4
- CVE-2026-22710Stored XSS through autocomment system messages in Wikibase5.4
- CVE-2025-32079Saving the right content to MediaWiki:GrowthMentors.json can take down the site6.5
- CVE-2025-32072HTML injection in feed output from i18n message8.3
- CVE-2025-32073System message XSS in HTMLTags5.4
- CVE-2025-32074XSSes in Extension:ConfirmAccount5.4
- CVE-2025-32067i18n XSS vulnerability in message growthexperiments5.4
- CVE-2025-32068Revoking authorization of OAuth2 consumer does not invalidate refresh tokens5.4
- CVE-2025-32069Wikitext stored XSS on filepages due to dangerous WBMI serialization5.4
- CVE-2025-32070XSSes in AJAXPoll5.4
- CVE-2025-32071Wikibase CommonsInlineImageFormatter: i18n XSS5.4
- CVE-2024-47841Path traversal when loading stylesheets7.5
- CVE-2024-47840Stored XSS through sidebar in Apex skin4.8
- CVE-2024-47847Various XSSes found in Cargo6.1