Growth vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Growth products: 1 record(s), with severity, exploitation and fixes.

Growthexperiments 1

Exploited only (KEV) →

CVE-2026-22713 Medium · 5.4 CWE-79 Jan 8, 2026

Stored XSS through edit summaries in GrowthExperiments

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - GrowthExperiments Extension: 1.45, 1.44, 1.43, 1.39.