MediaWiki - CSS extension vulnerabilities

3 known vulnerabilities in MediaWiki - CSS extension from Wikimedia Foundation. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MediaWiki - CSS extension: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-0669Jan 7, 2026Wikimedia Foundation

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wikimedia Foundation MediaWiki - CSS extension allows Path Traversal.This issue affects MediaWiki - CSS extension: 1.44, 1.43, 1.39.

• 7.5 High severity

  Mediawiki - CSS Extension: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-47841Oct 5, 2024Wikimedia FoundationEPSS 34.6%

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Path Traversal.This issue affects Mediawiki - CSS Extension: from 1.42.X before 1.42.2, from 1.41.X before

• 8.2 High severity

  Mediawiki - CSS Extension: Improper Encoding or Escaping of Output

  CVE-2024-47845Oct 5, 2024Wikimedia Foundation

  Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.