DeutschShown in its original language — a full translation is planned for a future version.
MediaWiki Extensions: Mehrere Schwachstellen
view advisory published 2026-09-30
Ein Angreifer kann mehrere Schwachstellen in MediaWiki Extensions ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-103585US | — | — | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting… | ||||
| CVE-2026-103584US | — | — | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Script… | ||||
| CVE-2026-103446US | — | Exploit | ||
Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass.
This issue affects MediaWik… | ||||
| CVE-2026-103445US | — | Exploit | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Page_Forms extension allows Stored XSS.
This issu… | ||||
| CVE-2026-103440US | — | Exploit | ||
Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation.
This issue affects… | ||||
| CVE-2026-103439US | — | — | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting (XSS… | ||||
| CVE-2026-103438US | — | — | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows Cross-Site Scripting… | ||||
| CVE-2026-103437US | — | Exploit | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows Reflected XSS.
This… | ||||
| CVE-2026-103444US | — | — | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS.
This issue… | ||||
| CVE-2026-103443US | — | — | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Collection (Book) extension allows XSS Targeting N… | ||||
| CVE-2026-103442US | — | Exploit | ||
External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection.
This issue affects MediaWiki C… | ||||
| CVE-2026-103441US | — | Exploit | ||
Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files.
This issue affect… | ||||
02
references
External citations — patches, advisories, analysis.
- EU Vulnerability Database vom 2026-09-30external
- EU Vulnerability Database vom 2026-09-30external
- EU Vulnerability Database vom 2026-09-30external
- EU Vulnerability Database vom 2026-09-30external
- EU Vulnerability Database vom 2026-09-30external
- EU Vulnerability Database vom 2026-09-30external
- EU Vulnerability Database vom 2026-09-30external
- EU Vulnerability Database vom 2026-09-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan