The Wikimedia Foundation Mediawiki Wikilambda Extension vulnerabilities

4 vulnerabilities

Known vulnerabilities in The Wikimedia Foundation Mediawiki Wikilambda Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2025-62695ubuntumediawiki+1
EPSS score
0.43%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master.6.1CVE-2026-103046the wikimedia foundationmediawiki - wikilambda extension
EPSS score
0.15%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1.6.9CVE-2026-58517mediawikimediawiki+1
EPSS score
0.33%
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.2.9CVE-2026-96872the wikimedia foundationmediawiki - wikilambda extension
EPSS score
0.23%
Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.