https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:05:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-247007 EUVD-2026-247007 https://cve.radiocsirt.org/vuln/euvd-2026-247007 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53484 <p>User-controlled inputs are improperly escaped in:</p> <p>* VotePage.php (poll option input)</p> <p>* ResultPage::getPagesTab() and getErrorsTab() (user-controllable page names)</p> <p>This allows attackers to inject JavaScript and compromise user sessions under certain conditions.</p> <p>This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.</p> <p>User-controlled inputs are improperly escaped in:</p> <p>* VotePage.php (poll option input)</p> <p>* ResultPage::getPagesTab() and getErrorsTab() (user-controllable page names)</p> <p>This allows attackers to inject JavaScript and compromise user sessions under certain conditions.</p> <p>This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53484 https://cve.radiocsirt.org/vuln/ghsa-m9g7-gvwq-v3g8 <p>User-controlled inputs are improperly escaped in:</p> <p>* VotePage.php (poll option input)</p> <p>* ResultPage::getPagesTab() and getErrorsTab() (user-controllable page names)</p> <p>This allows attackers to inject JavaScript and compromise user sessions under certain conditions.</p> <p>This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.</p> <p>User-controlled inputs are improperly escaped in:</p> <p>* VotePage.php (poll option input)</p> <p>* ResultPage::getPagesTab() and getErrorsTab() (user-controllable page names)</p> <p>This allows attackers to inject JavaScript and compromise user sessions under certain conditions.</p> <p>This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.</p> https://cve.radiocsirt.org/vuln/ghsa-m9g7-gvwq-v3g8 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1525 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um SQL-Injection- und XSS-Angriffe durchzuführen, Sicherheitsmechanismen zu umgehen, vertrauliche Informationen offenzulegen oder sich unbefugt höhere Berechtigungen zu verschaffen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um SQL-Injection- und XSS-Angriffe durchzuführen, Sicherheitsmechanismen zu umgehen, vertrauliche Informationen offenzulegen oder sich unbefugt höhere Berechtigungen zu verschaffen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1525