The Wikimedia Foundation Mediawiki - CirrusSearch Extension vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting The Wikimedia Foundation Mediawiki - CirrusSearch Extension: 2 record(s), with affected versions and fixes.
CVE-2026-96873
Medium · 5.5
CWE-79 Sep 24, 2026
Reflected XSS in CirrusSearch debug explain output
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - CirrusSearch extension allows Reflected XSS.
This issue affects Mediawiki - CirrusSearch extension through 1.46.0.
CVE-2025-62666
Medium · 6.9
CWE-770 Oct 18, 2025
DoS vector through the cirrusbuilddoc query API
Allocation of Resources Without Limits or Throttling vulnerability in The Wikimedia Foundation Mediawiki - CirrusSearch Extension allows HTTP DoS.This issue affects Mediawiki - CirrusSearch Extension: from master before 1.43.