Filter
AND
Wikimedia MediaWikiMediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remot…
7.5
First published (updated )
Wikimedia MediaWikiSVG filter evasion using default attribute values in DTD declaration
5.4
First published (updated )
Wikimedia MediaWikiParameters injection in SyntaxHighlight results in multiple vulnerabilities
9.8
First published (updated )
Wikimedia MediaWiki"Mark all pages visited" on the watchlist does not require a CSRF token
8.8
First published (updated )
Wikimedia MediaWikiSpecial:UserLogin?returnto=interwiki:foo will redirect to external sites
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wikimedia MediaWikiSpam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter
5.3
First published (updated )
Wikimedia MediaWikiSysops can undelete pages, although the page is protected against it
6.5
First published (updated )
Wikimedia MediaWikiSpecial:Search allows redirects to any interwiki link
6.1
First published (updated )
Wikimedia MediaWikiapi.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected F…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wikimedia MediaWikiMediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to i…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wikimedia MediaWikiMake rawHTML mode not apply to system messages
5.3
First published (updated )
Wikimedia MediaWikiapi.log contains passwords in plaintext
7.8
First published (updated )
Wikimedia MediaWikiXSS in SearchHighlighter::highlightText() [requires non-default config]
4.7
First published (updated )