wikimedia foundation

Top products

The 15 most recently published vulnerabilities affecting wikimedia foundation.

• CVE-2026-39837Stored XSS through the dynamic table format in Cargo5.4Apr 7, 2026
• CVE-2026-39841Stored XSS through list fields on Cargo's page values and Special:CargoTables6.1Apr 7, 2026
• CVE-2026-39840CSS injection in multiple Cargo display formats6.1Apr 7, 2026
• CVE-2026-39839Stored XSS through URLs in Cargo's map format6.1Apr 7, 2026
• CVE-2025-61658Special:GlobalContributions shows edits on wikis the viewer doesn't have access to4.3Feb 3, 2026
• CVE-2025-61637Stored XSS through system messages in MW Core4.8Feb 2, 2026
• CVE-2025-61638Sanitizer::validateAttributes data-XSS4.8Feb 2, 2026
• CVE-2025-61639Suppressed blocked IP is visible in Special:BlockList, RC, and other places4.8Feb 2, 2026
• CVE-2025-61640Stored XSS through system messages in Special:RecentChangesLinked (MW Core)4.8Feb 2, 2026
• CVE-2025-53479CheckUser: Reflected Cross-Site Scripting (XSS) in Special:CheckUser via unsanitized internationalized message5.4Jul 8, 2025
• CVE-2025-53480CheckUser: Reflected Cross-Site Scripting (XSS) in Special:Investigate (Account information tab) via unsanitized i18n messages5.4Jul 8, 2025
• CVE-2025-53496Stored XSS in MediaSearch5.4Jul 7, 2025
• CVE-2025-53488Stored XSS in WikiHiero6.1Jul 7, 2025
• CVE-2025-53498Lack of Audit Logging in AbuseFilter5.3Jul 7, 2025
• CVE-2025-53499Unauthorized Inspection of Protected Variables in AbuseFilter9.1Jul 7, 2025