How many mediawiki cargo CVEs are in CISA KEV?

None of mediawiki cargo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of mediawiki cargo are affected?

5 distinct mediawiki cargo versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in mediawiki cargo CVEs?

mediawiki cargo's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)).

What is the average severity of mediawiki cargo CVEs?

The average CVSS base score across mediawiki cargo's scored CVEs is 6.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

mediawiki

10 CVEs

mediawiki cargo Vulnerabilities

Name: mediawiki cargo vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for cargo by mediawiki.

10

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

10

Public exploits

PoC or exploit code

6.7

Avg CVSS

2024–2026

Last updated July 1, 2026

Overview

mediawiki cargo has 10 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting mediawiki cargo, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include mediawiki.

Severity and exploitation

How the CVSS severity of mediawiki cargo's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium9

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of mediawiki cargo's CVEs are currently listed in CISA's KEV catalog.

Public exploits

10

10 of mediawiki cargo's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every mediawiki cargo version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.8.74 CVEs
< 3.9.13 CVEs
3.6.0 <= v <= 3.6.03 CVEs

Fixed in

3.8.74 CVEs
3.9.13 CVEs

Find a version

10 CVEs

Sort

Cargo Extension: SQLi in Special:Drilldown
CVE-2026-14363
Public exploit
Patch
CWE-89
Medium · CVSS 6.9
EPSS 0.3% (21th pct)2026-07-01
SQLi in Cargo extension via year range filter
CVE-2026-58521
Public exploit
Patch
CWE-89
Medium · CVSS 6.9
EPSS 0.3% (20th pct)2026-07-01
Stored XSS through Cargo's map format
CVE-2026-58519
Public exploit
Patch
CWE-79
Medium · CVSS 6.9
EPSS 0.1% (3th pct)2026-07-01
Stored XSS through the dynamic table format in Cargo
CVE-2026-39837
Public exploit
Patch
CWE-80
Medium · CVSS 6.3
EPSS 0.2% (9th pct)2026-04-07
Stored XSS through list fields on Cargo's page values and Special:CargoTables
CVE-2026-39841
Public exploit
Patch
CWE-80
Medium · CVSS 6.3
EPSS 0.2% (5th pct)2026-04-07
CSS injection in multiple Cargo display formats
CVE-2026-39840
Public exploit
Patch
CWE-79
Medium · CVSS 5.1
EPSS 0.2% (5th pct)2026-04-07
Stored XSS through URLs in Cargo's map format
CVE-2026-39839
Public exploit
Patch
CWE-80
Medium · CVSS 6.3
EPSS 0.2% (8th pct)2026-04-07
Medium vulnerability · 2024-10-05
CVE-2024-47847
Public exploit
Patch
CWE-79
Medium · CVSS 6.9
EPSS 0.4% (31th pct)2024-10-05
Medium vulnerability · 2024-10-05
CVE-2024-47846
Public exploit
Patch
CWE-352
Medium · CVSS 6.9
EPSS 0.3% (19th pct)2024-10-05
High vulnerability · 2024-10-05
CVE-2024-47849
Public exploit
Patch
CWE-89
High · CVSS 8.8
EPSS 0.5% (42th pct)2024-10-05

Common weakness types

The CWE weakness categories most often found in mediawiki cargo CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many mediawiki cargo CVEs were published each year.

2024

3

2026

7

Other mediawiki products

Browse vulnerabilities for other products by mediawiki.

mediawiki431 CVEs checkuser8 CVEs abusefilter3 CVEs visual editor3 CVEs mobilefrontend2 CVEs createredirect1 CVEs matomo1 CVEs mediawik1 CVEs

All mediawiki vulnerabilities

Frequently asked questions

Common questions about mediawiki cargo vulnerabilities.

How many CVEs does mediawiki cargo have?: mediawiki cargo has 10 published CVE records since 2024.
How many mediawiki cargo CVEs are in CISA KEV?: None of mediawiki cargo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for mediawiki cargo vulnerabilities?: Yes — 10 of mediawiki cargo's CVEs have a known public exploit.
Which versions of mediawiki cargo are affected?: 5 distinct mediawiki cargo versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in mediawiki cargo CVEs?: mediawiki cargo's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)).
What is the average severity of mediawiki cargo CVEs?: The average CVSS base score across mediawiki cargo's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track mediawiki cargo vulnerabilities

Monitor new mediawiki cargo vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing