CVE Intelligence

The Wikimedia Foundation Mediawiki - TemplateSandbox Extension vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting The Wikimedia Foundation Mediawiki - TemplateSandbox Extension: 2 record(s), with affected versions and fixes.

CVE-2026-100240 Critical · 9.1 CWE-862 Sep 29, 2026
TemplateSandbox does not check read permissions for the page being previewed
Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.
CVE-2026-100376 Medium · 4.8 CWE-79 Sep 25, 2026
TemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefix
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.