Filter
AND
AND
MediaWiki MediaWikiapi.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected F…
9.8
First published (updated )
MediaWiki MediaWikiParameters injection in SyntaxHighlight results in multiple vulnerabilities
9.8
First published (updated )
MediaWiki MediaWikiHaving LocalisationCache directory default to system tmp directory is insecure
8.8
First published (updated )
MediaWiki MediaWiki"Mark all pages visited" on the watchlist does not require a CSRF token
8.8
First published (updated )
MediaWiki MediaWikiapi.log contains passwords in plaintext
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remot…
7.5
First published (updated )
MediaWiki MediaWikiSysops can undelete pages, although the page is protected against it
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiSpecial:UserLogin?returnto=interwiki:foo will redirect to external sites
6.1
First published (updated )
MediaWiki MediaWikiSpecial:Search allows redirects to any interwiki link
6.1
First published (updated )
MediaWiki MediaWikiSVG filter evasion using default attribute values in DTD declaration
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to i…
5.3
First published (updated )
MediaWiki MediaWikiMake rawHTML mode not apply to system messages
5.3
First published (updated )
MediaWiki MediaWikiSpam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter
5.3
First published (updated )
MediaWiki MediaWikiXSS in SearchHighlighter::highlightText() [requires non-default config]
4.7
First published (updated )