Mediawiki Visual Editor vulnerabilities

3 known vulnerabilities affecting mediawiki/visual_editor.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2025-61656UNKNOWNCVSS 0.0≥ 1.39.0, < 1.39.14≥ 1.43.0, < 1.43.4+1 more2026-02-03

CVE-2025-61656 [NONE] CWE-79 CVE-2025-61656: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files src/ce/ve.Ce.ClipboardHandler.Js. This issue affects VisualEditor: from * before 1.39.14, 1.43.4, 1.44.1.

CVE-2025-61655UNKNOWNCVSS 0.0≥ 1.39.0, < 1.39.14≥ 1.43.0, < 1.43.4+1 more2026-02-03

CVE-2025-61655 [NONE] CWE-79 CVE-2025-61655: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files includes/ApiVisualEditorEdit.Php, modules/ve-mw/init/targets/ve.Init.Mw.DesktopArticleTarget.Js, modules/ve-mw/ui/dialogs/ve.Ui.MWSaveDialog.Js. This issue a

CVE-2019-19708MEDIUMCVSS 6.1≤ 1.342019-12-11

CVE-2019-19708 [MEDIUM] CWE-79 CVE-2019-19708: The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an el The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.