Skip to content

Product

Wikimedia Foundation VisualEditor vulnerabilities

2 published CVES affecting Wikimedia Foundation VisualEditor, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
0
Low
0
Unscored
2
CISA KEV
0

Latest Wikimedia Foundation VisualEditor CVEs

Newest publication first

  1. CVE-2025-61655 Stored XSS through system messages in VisualEditor

    Published
    NoneCVSS 0.0 EPSS 0.18%

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files includes/ApiVisualEditorEdit.Php, modules/ve-mw/init/targets/ve.Init.Mw.DesktopArtic...

  2. CVE-2025-61656 XSS when pasting into VE

    Published
    NoneCVSS 0.0 EPSS 0.18%

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files src/ce/ve.Ce.ClipboardHandler.Js. This issue affects VisualEditor: from * before 1.3...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.