M
Vendor security profile
mediawiki
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs39
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
39toplam CVE
Uncertain39 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
39Unknown
Latest vulnerabilities
6.1
CVE-2026-77616Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token
Patch status unknownEPSS %0
6.1
CVE-2026-77610Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)
Patch status unknownEPSS %0
6.1
CVE-2026-77609Semantic MediaWiki has an open redirect in Special:URIResolver
Patch status unknownEPSS %0
6.1
CVE-2026-77607Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS
Patch status unknownEPSS %0
6.1
6.1
CVE-2026-77606Semantic MediaWiki has reflected XSS in Special:Ask plain table headers
Patch status unknownEPSS %0
8.6
5.4
CVE-2024-23176Cross-site scripting in MediaWiki MassMessage
Patch status unknownEPSS %0
3.1
CVE-2023-37253Vulnerability in MediaWiki ProofreadPage
Patch status unknownEPSS %0
3.1
CVE-2023-37252Vulnerability in MediaWiki CheckUser
Patch status unknownEPSS %0