Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-100240

TemplateSandbox does not check read permissions for the page being previewed

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Wikimedia
Products
Mediawiki - Templatesandbox Extension
CVE-2026-100376

TemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefix

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Wikimedia
Products
Mediawiki - Templatesandbox Extension