Filter
AND
-Infinity
0
Trending
MediaWiki"Mark all pages visited" on the watchlist does not require a CSRF token
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remo…
7.1
First published (updated )
MediaWikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP,…
7.1
First published (updated )
MediaWikiSysops can undelete pages, although the page is protected against it
6.5
First published (updated )
MediaWikiSpecial:UserLogin?returnto=interwiki:foo will redirect to external sites
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWikiSpecial:Search allows redirects to any interwiki link
6.1
First published (updated )
MediaWikiSVG filter evasion using default attribute values in DTD declaration
5.4
First published (updated )
MediaWikiMake rawHTML mode not apply to system messages
5.3
First published (updated )
MediaWikiSpam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWikiMediaWiki 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote attacker…
First published (updated )
MediaWikiXSS in SearchHighlighter::highlightText() [requires non-default config]
4.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.