Known vulnerabilities in MediaWiki - page 8

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52031 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-30458
CWE-79 Low
No
No
1.31.13, 1.35.2 12.04.2021 SB2021041201
SB2021041202
SB2021071701
#VU52030 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-30157
CWE-79 Low
No
No
1.31.12, 1.31.13, 1.35.2 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU49099 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35474
CWE-79 Low
No
No
1.35.1 18.12.2020 SB2020122119
SB2021011261
SB2020121836
#VU49100 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35475
CWE-79 Low
No
No
1.31.11 18.12.2020 SB2020122119
SB2020122120
SB2021011261
and 1 more
#VU49101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35478
CWE-79 Low
No
No
1.35.1 18.12.2020 SB2020122119
SB2021011261
SB2020121836
#VU49102 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35479
CWE-79 Low
No
No
1.31.11, 1.35.1 18.12.2020 SB2020122119
SB2020122120
SB2021011261
and 1 more
#VU49103 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35477
CWE-200 Low
No
No
1.31.11, 1.35.1 18.12.2020 SB2020122119
SB2020122120
SB2021011261
and 1 more
#VU49104 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35480
CWE-200 Low
No
No
1.31.11, 1.35.1 18.12.2020 SB2020122119
SB2020122120
SB2021011261
and 1 more
#VU47350 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-25812
CWE-79 Low
No
No
1.31.10, 1.34.4 27.09.2020 SB2020100605
#VU47351 - Improper input validation
CVE-2020-26121
CWE-20 Medium
No
No
1.34.4 27.09.2020 SB2020100605
#VU47352 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26120
CWE-79 Low
No
No
1.34.4 27.09.2020 SB2020100605
#VU47353 - Exposure of sensitive information to an unauthorized actor
CVE-2020-25869
CWE-200 Medium
No
No
1.31.10, 1.34.4 27.09.2020 SB2020100605
#VU29289 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15005
CWE-200 Medium
No
No
1.31.8, 1.33.4, 1.34.2 25.06.2020 SB2020062509
SB2020062627
#VU41111 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-10959
CWE-601 Low
No
No
1.35 02.06.2020 SB2020060230
#VU26570 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Low
No
No
1.34.1 03.04.2020 SB2020040312
#VU26569 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.31.7, 1.33.3, 1.34.1 03.04.2020 SB2020040312
#VU26568 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10960
CWE-79 Low
No
No
1.31.7, 1.33.3, 1.34.1 03.04.2020 SB2020040312
SB2020040313
#VU30373 - Use of Hard-coded Credentials
CVE-2012-4381
CWE-798 High
No
No
1.19.2 08.02.2020 SB2020020805
#VU30374 - Session Fixation
CVE-2013-4572
CWE-384 Medium
No
No
1.21.3 06.02.2020 SB2020020622
SB2013112014
SB2014012905
#VU30400 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6451
CWE-79 Low
No
No
1.22.1 28.01.2020 SB2020012828
SB2015020704
SB2014011420
and 1 more


Showing elements 141 - 160 out of 293