Advisories · Technology

The Wikimedia Foundation Mediawiki - EasyTimeline extension.

Every CVE that names The Wikimedia Foundation Mediawiki - EasyTimeline extension among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103044 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

EasyTimeline should not serve image maps as application/xml
- The Wikimedia Foundation Mediawiki - EasyTimeline extension
- Path traversal
- Other injection
Not analysed yet 29 Sept 2026