Wikimedia Foundation

Records256All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

Wikimedia Foundation records in CISA KEV

No Wikimedia Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wikidata Query Gui 3 records LOW Parsoid 2 records LOW Wikimedia-extensions-css 2 records HIGH Analytics-quarry-web 1 record LOW Apex 1 record HIGH Campaignevents 1 record LOW Mediawiki-extensions-i18ntags 1 record LOW Mediawiki-extensions-uploadwizard 1 record LOW

Records

2 records in Parsoid · all components

TI-2021-10863 CVE-2021-30458 · GHSA-5pqx-77vf-85rw

An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2.

LOW 29

An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00977 Published 2021-04-09 Fixed in 0.12.2, 0.11.1 CWE-79

TI-2025-38072 CVE-2025-61638 · GHSA-mq9h-r82m-hvhc

Sanitizer::validateAttributes data-XSS

LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.

CVSS 4.0N/A 0.0 Network Low privileges User interaction EPSS 0.00268 Published 2026-02-02 Fixed in 1.39.14, 1.43.4 +4 CWE-79

Open these records in search →

Critical	7
High	19
Medium	137
Low	49
No CVSS	44