Read the docs

Wikimedia Foundation

Records256All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Wikimedia Foundation records in CISA KEV

No Wikimedia Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wikidata Query Gui 3 records LOW Parsoid 2 records LOW Wikimedia-extensions-css 2 records HIGH Analytics-quarry-web 1 record LOW Apex 1 record HIGH Campaignevents 1 record LOW Mediawiki-extensions-i18ntags 1 record LOW Mediawiki-extensions-uploadwizard 1 record LOW

Records

1 record in Mediawiki-extensions-uploadwizard · all components

TI-2026-00464 CVE-2026-0671 · GHSA-79p6-j87f-jqp9

Multiple stored i18n/message-key XSSes in UploadWizard

Priority LOW 27

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).This issue affects Me…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2026-01-08 No fix listed CWE-79
Open these records in search →