CVE Intelligence

The Wikimedia Foundation MediaWiki PageForms extension vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting The Wikimedia Foundation MediaWiki PageForms extension: 2 record(s), with affected versions and fixes.

CVE-2026-103445 Low · 1.2 CWE-80 Sep 30, 2026
Stored XSS through PageForms #autoedit redirect links
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Page_Forms extension allows Stored XSS. This issue affects MediaWiki Page_Forms extension: 1.46, 1.45, and 1.43.
CVE-2025-62657 Medium · 5.8 CWE-79 Oct 20, 2025
Stored XSS through system messages in PageForms
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44.