VendorsMediaWikivisual_editorany version
Vulnerabilities

MediaWiki Visual Editor 1.34 for MediaWiki any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2019-19708
The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.
Published 2019-12-11 · Modified
6.1EPSS 0.007
CVE-2025-61656
XSS when pasting into VE
Published 2026-02-03 · Analyzed
6.1EPSS 0.002
CVE-2025-61655
Stored XSS through system messages in VisualEditor
Published 2026-02-03 · Analyzed
6.1EPSS 0.002