SomeRandomDeveloper

53 credited records · 43 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
0Monitor	CVE-2026-100238No exploit	Flow colon-separator and flow-guidedtour-optin-welcome-description messages allow stored XSSwikimedia foundation · mediawiki - flow extension · CWE-79 XSS	—	—	—	Today
19Monitor	CVE-2026-100383No exploit	Stored i18n XSS in WikiLambda's VisualEditor integrationwikimedia foundation · mediawiki - wikilambda extension · CWE-79 XSS	Medium4.8	—	0.3%	4 days ago
40Plan	CVE-2026-100382Proof of concept	Unauthenticated remote code execution through wikitext in ExternalDatawikimedia foundation · mediawiki - externaldata extension · CWE-78 pre-auth RCE Command injection	Critical10.0	—	0.9%	4 days ago
27Monitor	CVE-2026-100377No exploit	Revision-deleted pages can be viewed through WikiLambda's action=edit and Special:ViewAbstractwikimedia foundation · mediawiki - wikilambda extension · CWE-200 Pre-auth Info leak	Medium6.9	—	0.3%	4 days ago
24Monitor	CVE-2026-100237No exploit	Stored i18n XSS in the Flow integration of Thanksthe wikimedia foundation · mediawiki - thanks extension · CWE-79 Pre-auth XSS	Medium6.1	—	0.2%	4 days ago
27Monitor	CVE-2026-58517No exploit	Blocked users can create and edit WikiLambda objectsmediawiki · mediawiki · CWE-288 Pre-auth Auth bypass	Medium6.9	—	0.3%	Jul 1, 2026
27Monitor	CVE-2026-58519No exploit	Stored XSS through Cargo's map formatmediawiki · cargo · CWE-79 Pre-auth XSS	Medium6.9	—	0.2%	Jul 1, 2026
27Monitor	CVE-2026-58518No exploit	Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request mediawiki · mediawiki · CWE-352 Pre-auth CSRF	Medium6.9	—	0.1%	Jul 1, 2026
27Monitor	CVE-2026-39936No exploit	Stored XSS in Score due to usage of non-reserved data attributesthe wikimedia foundation · mediawiki - score extension · CWE-79 Pre-auth XSS	Medium6.9	—	0.5%	Apr 7, 2026
27Monitor	CVE-2026-39933No exploit	Multiple XSS vulnerabilities in GlobalWatchlistthe wikimedia foundation · mediawiki - globalwatchlist extension · CWE-79 Pre-auth XSS	Medium6.9	—	0.5%	Apr 7, 2026
20Monitor	CVE-2026-39840No exploit	CSS injection in multiple Cargo display formatsmediawiki · cargo · CWE-79 XSS	Medium5.1	—	0.2%	Apr 7, 2026
25Monitor	CVE-2026-39839No exploit	Stored XSS through URLs in Cargo's map formatmediawiki · cargo · CWE-80 XSS	Medium6.3	—	0.3%	Apr 7, 2026
27Monitor	CVE-2026-39838No exploit	ProofreadPage improperly sanitizes multiline styles using Sanitizer::checkCSSwikimedia foundation · mediawiki - proofreadpage extension · CWE-79 Pre-auth XSS	Medium6.9	—	0.5%	Apr 7, 2026
25Monitor	CVE-2026-39837No exploit	Stored XSS through the dynamic table format in Cargomediawiki · cargo · CWE-80 XSS	Medium6.3	—	0.2%	Apr 7, 2026
27Monitor	CVE-2026-22711No exploit	Stored XSS through system messages in WikiLovethe wikimedia foundation · mediawiki - wikilove extension · CWE-87 Pre-auth XSS	Medium6.9	—	0.3%	Apr 7, 2026
9Monitor	CVE-2026-22714No exploit	i18n XSS, DoS and config SQLI in Monacothe wikimedia foundation · mediawiki - monaco skin · CWE-79 Pre-auth XSS	Low2.3	—	0.4%	Jan 8, 2026
9Monitor	CVE-2026-22713No exploit	Stored XSS through edit summaries in GrowthExperimentsgrowth · growthexperiments · CWE-79 Pre-auth XSS	Low2.3	—	0.2%	Jan 8, 2026
9Monitor	CVE-2026-22712No exploit	ApprovedRevs allows bypassing the inline CSS sanitizerwikiworks · approved revs · CWE-116 Pre-auth	Low2.3	—	0.2%	Jan 8, 2026
9Monitor	CVE-2026-22710No exploit	Stored XSS through autocomment system messages in Wikibasewikimedia · wikibase · CWE-79 Pre-auth XSS	Low2.3	—	0.2%	Jan 8, 2026
24Monitor	CVE-2026-0670No exploit	Stored XSS through a system message and a user-provided parameter in ProofreadPagewikisource · proofread page · CWE-79 Pre-auth XSS	Medium6.1	—	0.2%	Jan 7, 2026
8Monitor	CVE-2025-62659No exploit	The CookieConsent extension does not properly use reserved data attributes, thus introducing potential XSS vectorsthe wikimedia foundation · mediawiki cookieconsent extension · CWE-79 XSS	Low2.1	—	0.3%	Oct 22, 2025
27Monitor	CVE-2025-62702No exploit	Stored XSS through system messagesthe wikimedia foundation · mediawiki - pagetriage extension · CWE-79 Pre-auth XSS	Medium6.9	—	0.3%	Oct 21, 2025
27Monitor	CVE-2025-62701No exploit	Stored XSS through system messagesthe wikimedia foundation · mediawiki - wikistories · CWE-79 Pre-auth XSS	Medium6.9	—	0.3%	Oct 21, 2025
27Monitor	CVE-2025-62694No exploit	Stored XSS through a system messagethe wikimedia foundation · mediawiki - wikilove extension · CWE-79 Pre-auth XSS	Medium6.9	—	0.4%	Oct 21, 2025
27Monitor	CVE-2025-62695No exploit	Stored XSS through system messagesthe wikimedia foundation · mediawiki - wikilambda extension · CWE-79 Pre-auth XSS	Medium6.9	—	0.3%	Oct 21, 2025

CVE-2026-100238
0Monitor
Flow colon-separator and flow-guidedtour-optin-welcome-description messages allow stored XSS
No exploit
- XSS
wikimedia foundation · mediawiki - flow extensionToday
CVE-2026-100383
19Monitor
Stored i18n XSS in WikiLambda's VisualEditor integration
MediumCVSS 4.8No exploitEPSS 0%
- XSS
wikimedia foundation · mediawiki - wikilambda extension4 days ago
CVE-2026-100382
40Plan
Unauthenticated remote code execution through wikitext in ExternalData
CriticalCVSS 10.0Proof of conceptEPSS 1%
- pre-auth RCE
- Command injection
wikimedia foundation · mediawiki - externaldata extension4 days ago
CVE-2026-100377
27Monitor
Revision-deleted pages can be viewed through WikiLambda's action=edit and Special:ViewAbstract
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- Info leak
wikimedia foundation · mediawiki - wikilambda extension4 days ago
CVE-2026-100237
24Monitor
Stored i18n XSS in the Flow integration of Thanks
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - thanks extension4 days ago
CVE-2026-58517
27Monitor
Blocked users can create and edit WikiLambda objects
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- Auth bypass
mediawiki · mediawikiJul 1, 2026
CVE-2026-58519
27Monitor
Stored XSS through Cargo's map format
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
mediawiki · cargoJul 1, 2026
CVE-2026-58518
27Monitor
Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- CSRF
mediawiki · mediawikiJul 1, 2026
CVE-2026-39936
27Monitor
Stored XSS in Score due to usage of non-reserved data attributes
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - score extensionApr 7, 2026
CVE-2026-39933
27Monitor
Multiple XSS vulnerabilities in GlobalWatchlist
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - globalwatchlist extensionApr 7, 2026
CVE-2026-39840
20Monitor
CSS injection in multiple Cargo display formats
MediumCVSS 5.1No exploitEPSS 0%
- XSS
mediawiki · cargoApr 7, 2026
CVE-2026-39839
25Monitor
Stored XSS through URLs in Cargo's map format
MediumCVSS 6.3No exploitEPSS 0%
- XSS
mediawiki · cargoApr 7, 2026
CVE-2026-39838
27Monitor
ProofreadPage improperly sanitizes multiline styles using Sanitizer::checkCSS
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
wikimedia foundation · mediawiki - proofreadpage extensionApr 7, 2026
CVE-2026-39837
25Monitor
Stored XSS through the dynamic table format in Cargo
MediumCVSS 6.3No exploitEPSS 0%
- XSS
mediawiki · cargoApr 7, 2026
CVE-2026-22711
27Monitor
Stored XSS through system messages in WikiLove
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - wikilove extensionApr 7, 2026
CVE-2026-22714
9Monitor
i18n XSS, DoS and config SQLI in Monaco
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - monaco skinJan 8, 2026
CVE-2026-22713
9Monitor
Stored XSS through edit summaries in GrowthExperiments
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
- XSS
growth · growthexperimentsJan 8, 2026
CVE-2026-22712
9Monitor
ApprovedRevs allows bypassing the inline CSS sanitizer
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
wikiworks · approved revsJan 8, 2026
CVE-2026-22710
9Monitor
Stored XSS through autocomment system messages in Wikibase
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
- XSS
wikimedia · wikibaseJan 8, 2026
CVE-2026-0670
24Monitor
Stored XSS through a system message and a user-provided parameter in ProofreadPage
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
wikisource · proofread pageJan 7, 2026
CVE-2025-62659
8Monitor
The CookieConsent extension does not properly use reserved data attributes, thus introducing potential XSS vectors
LowCVSS 2.1No exploitEPSS 0%
- XSS
the wikimedia foundation · mediawiki cookieconsent extensionOct 22, 2025
CVE-2025-62702
27Monitor
Stored XSS through system messages
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - pagetriage extensionOct 21, 2025
CVE-2025-62701
27Monitor
Stored XSS through system messages
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - wikistoriesOct 21, 2025
CVE-2025-62694
27Monitor
Stored XSS through a system message
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - wikilove extensionOct 21, 2025
CVE-2025-62695
27Monitor
Stored XSS through system messages
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - wikilambda extensionOct 21, 2025