MediaWiki

Products

Product	CVEs	Exploited	Latest
CheckUser	1	–	Sep 14, 2026
MassMessage	1	–	Sep 14, 2026
MediaWiki	1	–	Sep 25, 2023
ProofreadPage	1	–	Sep 14, 2026

CVE-2023-37252 Low 3.1 An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden. 0.2%
CVE-2024-23176 Medium 5.4 An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS. 0.2%
CVE-2023-37253 Low 3.1 An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables. 0.2%
CVE-2023-3550 High 7.3 Stored XSS leads to privilege escalation in MediaWiki v1.40.0 1.4%