Mediawiki

MediaWiki is a widely deployed wiki and content-management platform that powers numerous public and private knowledge bases, presenting a large attack surface despite a focused product footprint. Vulnerabilities affecting the vendor lean toward moderate severity outcomes and recur across the core platform and extensions such as CheckUser, Cargo, AbuseFilter, and VisualEditor through weakness classes centered on web-input handling, including cross-site scripting, cross-site request forgery, and improper data disclosure. The exposure pattern reflects the platform's role in rendering user-supplied and wiki-markup content across trust boundaries, making input neutralization and session management critical defense points. Defenders should maintain MediaWiki instances at current patch levels and apply security-focused configuration hardening, particularly where instances are internet-facing or handle sensitive knowledge domains; live severity and exploitation status are shown alongside this summary.