Read the docs

Wikimedia Foundation

Records256All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Wikimedia Foundation records in CISA KEV

No Wikimedia Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wikidata Query Gui 3 records LOW Parsoid 2 records LOW Wikimedia-extensions-css 2 records HIGH Analytics-quarry-web 1 record LOW Apex 1 record HIGH Campaignevents 1 record LOW Mediawiki-extensions-i18ntags 1 record LOW Mediawiki-extensions-uploadwizard 1 record LOW

Records

1 record in Apex · all components

TI-2024-32104 CVE-2024-47840 · GHSA-mmf2-8r78-pm42

Stored XSS through sidebar in Apex skin

Priority HIGH 70

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Apex skin allows Stored XSS.This issue affects Mediawiki - Apex skin: from…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0033 Published 2024-10-05 Fixed in 1.39.9, 1.41.3 +1 CWE-79
Open these records in search →