Multiple Vulnerabilities in MediaWiki and Extensions Allow XSS, Authentication Bypass, and SQL Injection

72% confidence

Description

Multiple vulnerabilities in MediaWiki and its extensions allow an attacker to perform cross-site scripting (XSS) attacks, redirect users to malicious websites, bypass authentication, and conduct SQL injection attacks.

Affected Products

Vendor	Product	Versions
mediawiki	mediawiki and extensions	—

Related News (1 articles)

Tier B

BSI Advisories3h ago

[NEU] [hoch] MediaWiki und Extensions: Mehrere Schwachstellen

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

CWECWE-79, CWE-287, CWE-89

PublishedJul 2, 2026

Last enriched3h ago

Multiple Vulnerabilities in MediaWiki and Extensions Allow XSS, Authentication Bypass, and SQL Injection

Description

Affected Products

Related News (1 articles)

Community Vote

Pin to Dashboard

Verification

Vulnerability Timeline