Wikimedia Foundation Urlshortener vulnerabilities

1 vulnerability

Known vulnerabilities in Wikimedia Foundation Urlshortener, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8HighCVE-2026-13706mediawiki +1 moreUrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWGImproper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php.EPSS0.48%