VendorsMediaWikicargoany version
Vulnerabilities

MediaWiki Cargo any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2026-14363
Cargo Extension: SQLi in Special:Drilldown
Published 2026-07-01 · Undergoing Analysis
9.8EPSS 0.005
CVE-2026-58521
SQLi in Cargo extension via year range filter
Published 2026-07-01 · Undergoing Analysis
9.8EPSS 0.005
CVE-2026-58519
Stored XSS through Cargo's map format
Published 2026-07-01 · Analyzed
6.9EPSS 0.002
CVE-2026-39839
Stored XSS through URLs in Cargo's map format
Published 2026-04-07 · Analyzed
6.3EPSS 0.003
CVE-2026-39841
Stored XSS through list fields on Cargo's page values and Special:CargoTables
Published 2026-04-07 · Analyzed
6.3EPSS 0.002
CVE-2026-39837
Stored XSS through the dynamic table format in Cargo
Published 2026-04-07 · Analyzed
6.3EPSS 0.002
CVE-2026-39840
CSS injection in multiple Cargo display formats
Published 2026-04-07 · Analyzed
6.1EPSS 0.002