SomeRandomDeveloper

Stored XSS through system messages in WikiLove

Blocked users can create and edit WikiLambda objects

Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. This issue affects Mediawiki - RedirectManager Extension: from * before 1.3.3.

Stored XSS through Cargo's map format

i18n XSS, DoS and config SQLI in Monaco

Stored XSS through edit summaries in GrowthExperiments

Stored XSS through autocomment system messages in Wikibase

ApprovedRevs allows bypassing the inline CSS sanitizer

Stored XSS through a system message and a user-provided parameter in ProofreadPage

The CookieConsent extension does not properly use reserved data attributes, thus introducing potential XSS vectors