p PatchFirst

PatchFirst · Latest vulnerabilities

mediawiki/cargo vulnerabilities

Vulnerabilities published for mediawiki/cargo in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 3

  2. CVE-2024-47847

    Medium · CVSS 6.9EPSS 0.41%Fix available

    Various XSSes found in Cargo

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.

    mediawiki/cargoPHP
    • Update to 3.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2024-23173

    Medium · CVSS 6.1EPSS 0.42%Fix available

    CVE-2024-23173

    An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.

    mediawiki/cargo mediawiki/cargo mediawiki/cargoPHP
    • Update to 1.35.14
    • Update to 1.39.6
    • Update to 1.40.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →