mediawiki

Records456All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical20CVSS 9.0–10.0

CVSS high70CVSS 7.0–8.9

Exploited now

mediawiki records in CISA KEV

No mediawiki vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Visual Editor · all components

TI-2019-14202 CVE-2019-19708 · GHSA-8mgg-gfxm-vwwc

LOW 28

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00716 Published 2019-12-11 No fix listed CWE-79

TI-2025-38090 CVE-2025-61656 · GHSA-5499-9jhv-ccm9

LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor.

CVSS 4.0N/A 0.0 Network No auth No interaction EPSS 0.00183 Published 2026-02-03 Fixed in 1.39.14, 1.43.4 +1 CWE-79

TI-2025-38089 CVE-2025-61655 · GHSA-5gh3-pm42-f6qp

LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor.

CVSS 4.0N/A 0.0 Network High privileges No interaction EPSS 0.00177 Published 2026-02-03 Fixed in 1.39.14, 1.43.4 +1 CWE-79