Wikisource vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Wikisource products: 1 record(s), with severity, exploitation and fixes.

Proofread Page 1

Exploited only (KEV) →

CVE-2026-0670 Medium · 6.1 CWE-79 Jan 7, 2026

Stored XSS through a system message and a user-provided parameter in ProofreadPage

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39.