https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:06:17.743563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02786 bdu:2024-02786 2026-10-03T22:06:17.830650+00:00 bdu:2024-02786 https://cve.radiocsirt.org/vuln/euvd-2026-242625 EUVD-2026-242625 2026-10-03T22:06:17.830685+00:00 EUVD-2026-242625 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23173 fkie_cve-2024-23173 2026-10-03T22:06:17.830700+00:00

An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.

 https://cve.radiocsirt.org/vuln/ghsa-rhpm-63w5-79rg GHSA-rhpm-63w5-79rg — MediaWiki Cargo Extension Cross-site Scripting vulnerability 2026-10-03T22:06:17.830731+00:00

Affected: Packagist: mediawiki/cargo

An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.

 https://cve.radiocsirt.org/vuln/gsd-2024-23173 gsd-2024-23173 2026-10-03T22:06:17.830757+00:00 gsd-2024-23173 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0083 WID-SEC-W-2024-0083 — MediaWiki: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-03T22:06:17.830769+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.