The Wikimedia Foundation Mediawiki Cargo Extension vulnerabilities

10 vulnerabilities

Known vulnerabilities in The Wikimedia Foundation Mediawiki Cargo Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2025-62671the wikimedia foundationmediawiki - cargo extension
EPSS score
0.51%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master.9.8CVE-2026-14363mediawikicargo+1
EPSS score
0.52%
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.6.1CVE-2026-103049the wikimedia foundationmediawiki - cargo extension
EPSS score
0.15%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: before 1.46.1.6.9CVE-2026-58519mediawikicargo+1
EPSS score
0.24%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension: from * before 3.9.1.9.8CVE-2026-58521mediawikicargo+1
EPSS score
0.55%
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.6.9CVE-2026-96878the wikimedia foundationmediawiki - cargo extension
EPSS score
0.27%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.2.3CVE-2026-96874the wikimedia foundationmediawiki - cargo extension
EPSS score
0.20%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in the Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.6.9CVE-2026-96876the wikimedia foundationmediawiki - cargo extension
EPSS score
0.27%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.6.9CVE-2026-96877the wikimedia foundationmediawiki - cargo extension
EPSS score
0.27%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.6.9CVE-2026-96875the wikimedia foundationmediawiki - cargo extension
EPSS score
0.27%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4.