https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T12:47:48.853069+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-508 certfr-2014-avi-508 — De multiples vulnérabilités ont été corrigées dans <span class="textit">MediaWiki</span>. Elles permettent à un attaqua… 2026-10-18T12:47:48.856372+00:00 certfr-2014-avi-508 https://cve.radiocsirt.org/vuln/euvd-2026-103735 EUVD-2026-103735 2026-10-18T12:47:48.856409+00:00 EUVD-2026-103735 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9276 fkie_cve-2014-9276 2026-10-18T12:47:48.856424+00:00

Cross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgRawHTML is set to true, allows remote attackers to hijack the authentication of users with edit permissions for requests that cross-site scripting (XSS) attacks via the wpInput parameter, which is not properly handled in the preview.

 https://cve.radiocsirt.org/vuln/ghsa-4rrq-7p7h-pfq3 GHSA-4rrq-7p7h-pfq3 2026-10-18T12:47:48.856451+00:00

Cross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgRawHTML is set to true, allows remote attackers to hijack the authentication of users with edit permissions for requests that cross-site scripting (XSS) attacks via the wpInput parameter, which is not properly handled in the preview.

 https://cve.radiocsirt.org/vuln/gsd-2014-9276 gsd-2014-9276 2026-10-18T12:47:48.856468+00:00 gsd-2014-9276