Vulnerabilities (CVE)

Filtered by vendor Wikimedia Subscribe
Filtered by product Mediawiki-extensions-uploadwizard
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-0671 1 Wikimedia 1 Mediawiki-extensions-uploadwizard 2026-01-15 N/A 6.1 MEDIUM
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39.