https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:14:12.277914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-204611 EUVD-2026-204611 2026-10-03T06:14:12.381778+00:00 EUVD-2026-204611 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37302 fkie_cve-2023-37302 2026-10-03T06:14:12.381830+00:00

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a title attribute).

 https://cve.radiocsirt.org/vuln/ghsa-fmrf-p77g-vv5c GHSA-fmrf-p77g-vv5c — MediaWiki Cross-site Scripting vulnerability 2026-10-03T06:14:12.381866+00:00

Affected: Packagist: wikibase/wikibase

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a title attribute).

 https://cve.radiocsirt.org/vuln/gsd-2023-37302 gsd-2023-37302 2026-10-03T06:14:12.381891+00:00 gsd-2023-37302 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-37302 UBUNTU-CVE-2023-37302 2026-10-03T06:14:12.381904+00:00

Affected: Ubuntu:18.04:LTS: mediawiki, Ubuntu:Pro:20.04:LTS: mediawiki, Ubuntu:Pro:22.04:LTS: mediawiki, Ubuntu:Pro:24.04:LTS: mediawiki, Ubuntu:25.10: mediawiki, Ubuntu:26.04:LTS: mediawiki

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a title attribute).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1684 WID-SEC-W-2023-1684 — MediaWiki: Mehrere Schwachstellen 2026-10-03T06:14:12.381932+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Cross Site Scripting Angriff durchzuführen.