Vulnerabilidades en Wikimedia Foundation
152 resultadosCVE-2026-34092LOWBlock UI elements in 'tools'-sidebar shows presence of an autoblocked IPEPSS 0.2%CVE-2025-53502MEDIUMHTML injection in FeaturedFeedsEPSS 0.2%CVE-2025-61645NONECodexTablePager has i18n XSSEPSS 0.2%CVE-2026-34093LOWSpecial:UserRights allows viewing user rights from private wikiEPSS 0.2%CVE-2025-53482MEDIUMIPInfo: Message key XSS through several IPInfo messages in infobox and popupEPSS 0.2%CVE-2025-53488MEDIUMStored XSS in WikiHieroEPSS 0.2%CVE-2025-61651NONEi18n XSS through Special:CheckUser CheckUser helperEPSS 0.2%CVE-2025-53483HIGHSecurePoll: Multiple admin actions vulnerable to Cross-Site Request ForgeryEPSS 0.2%CVE-2025-7056MEDIUMStored XSS in UrlShortenerEPSS 0.2%CVE-2025-53480MEDIUMCheckUser: Reflected Cross-Site Scripting (XSS) in Special:Investigate (Account information tab) via unsanitized i18n messagesEPSS 0.2%CVE-2025-53497MEDIUMStored XSS in RelatedArticlesEPSS 0.2%CVE-2025-53479MEDIUMCheckUser: Reflected Cross-Site Scripting (XSS) in Special:CheckUser via unsanitized internationalized messageEPSS 0.2%CVE-2025-53496MEDIUMStored XSS in MediaSearchEPSS 0.2%CVE-2025-7362MEDIUMMsUpload: Stored Cross-Site Scripting (XSS) via unsanitized msu-continue system messageEPSS 0.2%CVE-2025-7057MEDIUMStored XSS in QuizEPSS 0.2%CVE-2025-53478MEDIUMCheckUser: Reflected Cross-Site Scripting (XSS) in Special:Investigate via unsanitized i18n messagesEPSS 0.2%CVE-2025-53487MEDIUMApprovedRevs: Stored Cross-Site Scripting (XSS) via unsanitized system messagesEPSS 0.2%CVE-2025-53491MEDIUMXSS in FlaggedRevsEPSS 0.2%CVE-2026-39837MEDIUMStored XSS through the dynamic table format in CargoEPSS 0.2%CVE-2026-0670MEDIUMStored XSS through a system message and a user-provided parameter in ProofreadPageEPSS 0.2%