THE Wikimedia Foundation vulnerabilities
98 CVEs and advisories name THE Wikimedia Foundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-32071Wikibase CommonsInlineImageFormatter: i18n XSS
- CVE-2024-47841Path traversal when loading stylesheets
- CVE-2024-47840Stored XSS through sidebar in Apex skin
- CVE-2024-47847Various XSSes found in Cargo
- CVE-2024-47846Special:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protection
- CVE-2024-47849Backticks can allow the usage of not-allowed SQL functions
- CVE-2024-47845CSS sanitizer used incorrectly, and is easily bypassed
- CVE-2024-47848User can review/unreview articles while blocked