Visual Editor (Mediawiki) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2026-02-03. Vendor: Mediawiki.

CVEs of Visual Editor

• CVE-2025-61656 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This…
• CVE-2025-61655 - CVSS 6.1 (medium), 2026-02-03: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This…
• CVE-2019-19708 - CVSS 6.1 (medium), 2019-12-11: The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.