Log in Start free

StarCitizenWiki

Products

ProductCVEsExploitedLatest
mediawiki-extensions-EmbedVideo5–Sep 24, 2026

Exploited and recent CVEs

  • CVE-2026-57440 High 7.5 Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled 0.3%
  • CVE-2026-55691 High 8.6 EmbedVideo Extension : Stored XSS via unsanitized class passed to template 0.5%
  • CVE-2026-55690 High 7.5 EmbedVideo Extension: Stored XSS via unsanitized service name in exception text 0.5%
  • CVE-2026-55692 High 7.5 EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled 0.5%
  • CVE-2025-59839 High 8.6 Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes 0.3%