All 5 CVE vulnerabilities found in mediawiki-extensions-EmbedVideo, with AI-generated Chinese analysis, references, and POCs.
Vendor: StarCitizenWiki
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-57440 | Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled CWE-79 | 7.5 | High | 2026-09-24 |
| CVE-2026-55691 | EmbedVideo Extension : Stored XSS via unsanitized class passed to template CWE-79 | 8.6 | High | 2026-09-15 |
| CVE-2026-55690 | EmbedVideo Extension: Stored XSS via unsanitized service name in exception text CWE-79 | 7.5 | High | 2026-09-15 |
| CVE-2026-55692 | EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled CWE-79 | 7.5 | High | 2026-09-15 |
| CVE-2025-59839 | Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes CWE-79 | 8.6 | High | 2025-09-25 |
All 5 known CVE vulnerabilities affecting mediawiki-extensions-EmbedVideo with full Chinese analysis, references, and POCs where available.