Wikimedia Foundation Mediawiki Datatransfer Extension vulnerabilities

2 vulnerabilities

Known vulnerabilities in Wikimedia Foundation Mediawiki Datatransfer Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2025-23081wikimedia foundationmediawiki - datatransfer extension
EPSS score
0.19%
Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects Mediawiki - DataTransfer Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.7.5CVE-2026-100242wikimedia foundationmediawiki - datatransfer extension
EPSS score
0.34%
Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0.