Tag
MediaWiki Remote Code Execution via PHP Deserialization
1 rule 2 TTPs 2 CVEsMediaWiki is vulnerable to remote code execution (CVE-2026-58025) via insecure PHP deserialization within the LogEntryBase::extractParams method, allowing authenticated sysop users to execute arbitrary code through malicious XML imports.
MediaWiki Maps Stored XSS via display_map `overlays` Parameter (CVE-2026-52854)
1 rule 2 TTPsA high-severity stored cross-site scripting (XSS) vulnerability, CVE-2026-52854, exists in the MediaWiki Maps extension (versions prior to 12.1.3), allowing any authenticated user with edit permissions to inject malicious JavaScript into the `overlays` parameter of the `display_map` parser function, leading to arbitrary client-side code execution in a victim's browser.
MediaWiki Multiple Vulnerabilities Lead to Remote Code Execution
2 rules 3 TTPsA remote, authenticated attacker can exploit multiple vulnerabilities in MediaWiki to execute arbitrary code, disclose information, perform a cross-site scripting attack, or cause a denial of service condition.