Vulnerabilities

TI-2025-05987 CVE-2025-6591 · GHSA-723j-w27h-459f

HTML injection in API action=feedcontributions output from i18n message

LOW 3

Vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0N/A 0.0 Network High privileges User interaction EPSS 0.00439 Published 2026-02-02 Fixed in 1.39.13, 1.42.7 1.43.2 +1 CWE-79

TI-2025-05989 CVE-2025-6593 · GHSA-qr4c-wx99-f4h5

LOW 12

Vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00443 Published 2026-02-02 Fixed in 1.39.13, 1.42.7 1.43.2 +1 CWE-200

TI-2025-05990 CVE-2025-6594 · GHSA-f8f3-5c83-vh78

LOW 3

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0N/A 0.0 Network No auth User interaction EPSS 0.0031 Published 2026-02-02 Fixed in 1.39.13, 1.42.7 1.43.2 +1 CWE-79

TI-2025-06299 CVE-2025-6927 · GHSA-vw3r-fh3c-r4pj

LOW 13

Vulnerability in Wikimedia Foundation MediaWiki.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00508 Published 2026-02-02 Fixed in 1.39.13, 1.42.7 1.43.2 +1 CWE-22