Wikimedia Foundation Mediawiki Campaignevents Extension vulnerabilities

2 vulnerabilities

Known vulnerabilities in Wikimedia Foundation Mediawiki Campaignevents Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.6CVE-2025-53490jlycampaignevents+1
EPSS score
0.25%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - CampaignEvents Extension: from 1.43.X before 1.43.2.5.3CVE-2026-0817wikimedia foundationmediawiki - campaignevents extension+1
EPSS score
0.27%
Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.