Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: mediawiki Component: Visual Editor Clear all filters
TI-2025-38089 CVE-2025-61655 · GHSA-5gh3-pm42-f6qp

Stored XSS through system messages in VisualEditor

Priority LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor.

CVSS 4.0N/A 0.0 Network High privileges No interaction EPSS 0.00177 Published 2026-02-03 Fixed in 1.39.14, 1.43.4 +1 CWE-79
TI-2025-38090 CVE-2025-61656 · GHSA-5499-9jhv-ccm9

XSS when pasting into VE

Priority LOW 2

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor.

CVSS 4.0N/A 0.0 Network No auth No interaction EPSS 0.00183 Published 2026-02-03 Fixed in 1.39.14, 1.43.4 +1 CWE-79