All 2 CVE vulnerabilities found in Mediawiki - TemplateSandbox Extension, with AI-generated Chinese analysis, references, and POCs.
Vendor: Wikimedia Foundation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-100240 | TemplateSandbox does not check read permissions for the page being previewed CWE-862 | - | - | 2026-09-29 |
| CVE-2026-100376 | TemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefix CWE-79 | 4.8 | Medium | 2026-09-25 |
All 2 known CVE vulnerabilities affecting Mediawiki - TemplateSandbox Extension with full Chinese analysis, references, and POCs where available.