Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-100383 1 Wikimedia 1 Mediawiki-wikilambda Extension 2026-09-26 N/A
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.
CVE-2026-100377 1 Wikimedia 1 Mediawiki-wikilambda Extension 2026-09-26 N/A
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.
CVE-2026-96872 1 Wikimedia 1 Mediawiki-wikilambda Extension 2026-09-24 N/A
Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.
CVE-2026-58517 2 Mediawiki, Wikimedia 2 Mediawiki, Mediawiki-wikilambda Extension 2026-07-06 4.3 Medium
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.