The Wikimedia Foundation Mediawiki Growthexperiments Extension vulnerabilities
4 vulnerabilities
Known vulnerabilities in The Wikimedia Foundation Mediawiki Growthexperiments Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-62667the wikimedia foundationmediawiki - growthexperiments extension
EPSS score0.45%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Stored XSS.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39.CVE-2025-62668the wikimedia foundationmediawiki - growthexperiments extensionEPSS score0.42%
Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39.CVE-2026-39934the wikimedia foundationmediawiki - growthexperiments extensionEPSS score0.43%
Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue was remediated only on the `master` branch.CVE-2026-22713growthgrowthexperiments+1EPSS score0.19%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - GrowthExperiments Extension: 1.45, 1.44, 1.43, 1.39.