Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Wikimedia Foundation Mediawiki - IPInfo Extension 1.39.13, 1.42.7, 1.43.2 Clear all filters
TI-2025-33427 CVE-2025-53482 · GHSA-c8vc-jj39-hw4x

IPInfo: Message key XSS through several IPInfo messages in infobox and popup

Priority LOW 27

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Cross-Site Scripting (XSS).This issue affects Mediawik…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00217 Published 2025-07-04 Fixed in 1.39.13, 1.42.7 +1 CWE-79
TI-2025-33426 CVE-2025-53481 · GHSA-v6mw-4fwv-qvr5

Denial of service vector on ipinfo/v0/norevision

Priority LOW 39

Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Excessive Allocation.This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X be…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00483 Published 2025-07-04 Fixed in 1.39.13, 1.42.7 +1 CWE-400