Scribunto
This hub aggregates every CVE we track for Scribunto, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
5
CVEs tracked
0
Critical
2
High
0
In CISA KEV
Severity distribution
HIGH2MEDIUM2
Monthly trend
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
1
0
0
0
0
2024-102026-09
Latest CVEs
The 5 most recently published vulnerabilities affecting Scribunto.
- CVE-2026-34089Memory leak in Scribunto causes runJobs.php to run out of memory7.5
- CVE-2025-67482Lua segfault in unpack()
- CVE-2025-53501Content Access Bypass in Scribunto8.8
- CVE-2014-9481The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML.5.9
- CVE-2015-2939Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a function name, which is not properly handled i...4.3
Product normalization is registry-driven with AI assist and human review. How it works