MediaWiki Skin
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in MediaWiki Skin.
By the Year
In 2025 there have been 0 vulnerabilities in MediaWiki Skin. Skin did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 1 | 6.10 |
It may take a day or so for new Skin vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent MediaWiki Skin Security Vulnerabilities
The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped
CVE-2020-27620
6.1 - Medium
- October 22, 2020
The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wfMessage and Html::rawElement, as demonstrated by CosmosSocialProfile::getUserGroups.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for MediaWiki Skin or by MediaWiki? Click the Watch button to subscribe.