M
Vendor security profile
mediawiki
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs32
Critical3
CISA KEV0
Public exploit8
Patch rate%16
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
4
0
0
25
0
3
0
CVE KEV
CVE severity distribution
32toplam CVE
Critical3 (9%)
High4 (13%)
Medium23 (72%)
Low2 (6%)
Patch and exploitation view
%16
Verified patch
%0
CISA KEV
%25
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
27Unknown
Latest vulnerabilities
6.1
CVE-2026-77616
Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token
S
Patch status unknownEPSS %0
6.1
CVE-2026-77610
Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)
S
Patch status unknownEPSS %0
6.1
CVE-2026-77609
Semantic MediaWiki has an open redirect in Special:URIResolver
S
Patch status unknownEPSS %0
6.1
CVE-2026-77607
Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS
S
Patch status unknownEPSS %0
6.1
CVE-2026-77608
Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)
S
Patch status unknownEPSS %0
6.1
CVE-2026-77606
Semantic MediaWiki has reflected XSS in Special:Ask plain table headers
S
Patch status unknownEPSS %0
8.6
CVE-2025-61682
Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes
S
Patch status unknownEPSS %0
3.1
CVE-2023-37253
Vulnerability in MediaWiki ProofreadPage
M
Patch status unknownEPSS %0
3.1
CVE-2023-37252
Vulnerability in MediaWiki CheckUser
M
Patch status unknownEPSS %0
5.4
CVE-2024-23176
Cross-site scripting in MediaWiki MassMessage
M
Patch status unknownEPSS %0