Mediawiki-campaignevents Extension CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-0817

CampaignEvents API missing authorization exposes meeting and chat URLs

Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Mediawiki Wikimedia

Products

Mediawiki Campaignevents Mediawiki-campaignevents Extension

CVE-2026-39935

XSS-via-i18n in localised wiki names

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-Site Scripting (XSS). This issue was remediated only on the `master` branch.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Wikimedia

Products

Mediawiki-campaignevents Extension

Page 1 of 1.