Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: The Wikimedia Foundation Mediawiki - GrowthExperiments Extension 1.39 Clear all filters
TI-2025-38868 CVE-2025-62667 · GHSA-x6m8-4qgj-87fj

Stored XSS through article extracts in GrowthExperiments

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Stored XSS.This issue affects Mediawiki…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00449 Published 2025-10-18 Fixed in 1.39 CWE-79
TI-2025-38869 CVE-2025-62668 · GHSA-v6f7-mh9q-h69v

Insufficient permission checks in action=growthsetmentor

Priority LOW 37

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affects Mediawiki - GrowthExperiments Extension: from master before…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00417 Published 2025-10-18 Fixed in 1.39 CWE-276