p PatchFirst

PatchFirst · Latest vulnerabilities

mediawiki/data-transfer vulnerabilities

Vulnerabilities published for mediawiki/data-transfer in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-23081

    Medium · CVSS 6.1EPSS 0.19%Fix available

    Various security vulnerabilities in Extension:DataTransfer

    Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects Mediawiki - DataTransfer Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.

    mediawiki/data-transfer mediawiki/data-transfer mediawiki/data-transferPHP
    • Update to 1.39.11
    • Update to 1.41.3
    • Update to 1.42.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →