VendorsWikimediaparsoidall versions
Vulnerabilities

Wikimedia Parsoid

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2021-30458
An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.
Published 2021-04-09 · Modified
6.1EPSS 0.010
CVE-2025-61638
Sanitizer::validateAttributes data-XSS
Published 2026-02-02 · Analyzed
4.8EPSS 0.002