Vulnerabilidades en Wikimedia Foundation
152 resultadosCVE-2025-53485HIGHSecurePoll: Unauthorized access to SetTranslationHandler allows arbitrary text changesEPSS 0.3%CVE-2025-53498MEDIUMLack of Audit Logging in AbuseFilterEPSS 0.3%CVE-2026-34090MEDIUMSuggested investigations: Handle suppressed usernamesEPSS 0.3%CVE-2025-61658LOWSpecial:GlobalContributions shows edits on wikis the viewer doesn't have access toEPSS 0.3%CVE-2025-53500MEDIUMStored XSS in MassEditRegexEPSS 0.3%CVE-2026-58038NONEStored XSS through javascript URLs in SVGs generated by EasyTimelineEPSS 0.3%CVE-2026-0817MEDIUMCampaignEvents API missing authorization exposes meeting and chat URLsEPSS 0.3%CVE-2025-53492LOWStored XSS in MintyDocsEPSS 0.3%CVE-2026-58030MEDIUMSyntaxHighlight stored XSS via unsanitized 'linelinks' attributeEPSS 0.3%CVE-2026-58037NONECore log entries for exceptions and XSS issues in log entry formatting code that may be caused by user-controlled inputEPSS 0.3%CVE-2025-61646LOWWatchlist group mode reveals authors of edits with hidden authorshipEPSS 0.3%CVE-2025-61638NONESanitizer::validateAttributes data-XSSEPSS 0.3%CVE-2026-58031NONEStored i18n XSS in Special:ApiSandbox when a deprecated module is selectedEPSS 0.3%CVE-2026-34087MEDIUMUsers API leaks whether privileged users have their user groups disabled for lack of 2FAEPSS 0.3%CVE-2026-58028NONEPretty-printed API output combined with centralauthtoken allows XSS with certain gadgetsEPSS 0.3%CVE-2026-100378MEDIUMMissing permission check in the Translate sandbox doRemind actionEPSS 0.3%CVE-2025-53493MEDIUMStored XSS in MintyDocsEPSS 0.3%CVE-2025-53494MEDIUMStored XSS in TwoColConflictEPSS 0.3%CVE-2025-61643LOWEventStreams publishes suppressed recent change entries that are suppressed from their creationEPSS 0.3%CVE-2025-23078MEDIUMXSS in BreadCrumbs2EPSS 0.3%