Exposure of MediaWiki

Wikis
21
exposure score
21,763
sites use
0
exploited
0
critical

CVEs

75 results
CVE-2026-58031NONEStored i18n XSS in Special:ApiSandbox when a deprecated module is selectedEPSS 0.3%CVE-2025-61643LOWEventStreams publishes suppressed recent change entries that are suppressed from their creationEPSS 0.3%CVE-2025-11261NONEStored i18n XSS exposed by security patch for T402077EPSS 0.3%CVE-2025-67483NONETheoretical i18n XSS in mediawiki.page.preview.js when a page has multiple protection levelsEPSS 0.3%CVE-2025-67481NONEmw.message(…).parse() doesn't output safe HTML, but it's being used as if it doesEPSS 0.3%CVE-2025-61639LOWSuppressed blocked IP is visible in Special:BlockList, RC, and other placesEPSS 0.3%CVE-2025-61642NONEStored XSS through system messages provided to CodexHtmlFormsEPSS 0.3%CVE-2025-61637NONEStored XSS through system messages in MW CoreEPSS 0.3%CVE-2025-61640NONEStored XSS through system messages in Special:RecentChangesLinked (MW Core)EPSS 0.3%CVE-2025-67477NONEStored XSS through a system message in Special:ApiSandboxEPSS 0.3%CVE-2025-67480NONElist=allrevisions can be used to bypass Extension:LockdownEPSS 0.2%CVE-2025-67475NONEStored XSS through edit summaries in MW CoreEPSS 0.2%CVE-2025-61636NONECodex Special:Block vulnerable to message key XSSEPSS 0.2%CVE-2025-61645NONECodexTablePager has i18n XSSEPSS 0.2%CVE-2026-34094LOWCustomized help link for page protection indicator is relative to subpage name, because the link target is missing the "/wiki/" prefixEPSS 0.2%