Filter
AND
MediaWiki MediaWikiSysops can undelete pages, although the page is protected against it
6.5
First published (updated )
MediaWiki MediaWiki"Mark all pages visited" on the watchlist does not require a CSRF token
8.8
First published (updated )
MediaWiki MediaWikiSpecial:UserLogin?returnto=interwiki:foo will redirect to external sites
6.1
First published (updated )
MediaWiki MediaWikiSpecial:Search allows redirects to any interwiki link
6.1
First published (updated )
MediaWiki MediaWikiSpam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiSVG filter evasion using default attribute values in DTD declaration
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remo…
7.1
First published (updated )
MediaWiki MediaWikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP,…
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMake rawHTML mode not apply to system messages
5.3
First published (updated )
MediaWiki MediaWikiapi.log contains passwords in plaintext
7.8
First published (updated )
MediaWiki MediaWikiXSS in SearchHighlighter::highlightText() [requires non-default config]
4.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMediaWiki 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote attacker…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.