mediawiki-extensions-css vulnerabilities

2 known vulnerabilities in mediawiki-extensions-css from Wikimedia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Mediawiki - CSS Extension: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-47841Oct 5, 2024Wikimedia FoundationEPSS 34.6%

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Path Traversal.This issue affects Mediawiki - CSS Extension: from 1.42.X before 1.42.2, from 1.41.X before

• 8.2 High severity

  Mediawiki - CSS Extension: Improper Encoding or Escaping of Output

  CVE-2024-47845Oct 5, 2024Wikimedia Foundation

  Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.