This page lists publicly disclosed CVE vulnerabilities affecting wikimedia mediawiki-extensions-uploadwizard (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-0671 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39. | c4f26cc8-17ff-4c99-b5e2-38fc1793eacc | 6.1 | 0.20% | 2026-01-08 | 2026-06-17 |