MESLewis

3 exploits Active since Oct 2025
CVE-2026-30917 WRITEUP HIGH WRITEUP
MediaWiki Bucket <2.1.1 - Stored XSS
Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a PAGE type, which will execute whenever a user views that table's corresponding Bucket namespace page. This vulnerability is fixed in 2.1.1.
CVE-2026-30917 WRITEUP HIGH WRITEUP
MediaWiki Bucket <2.1.1 - Stored XSS
Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a PAGE type, which will execute whenever a user views that table's corresponding Bucket namespace page. This vulnerability is fixed in 2.1.1.
CVE-2025-61766 WRITEUP MEDIUM WRITEUP
Bucket < 1.0.0 - Denial of Service via Bucket Query Recursion
Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the `!=` comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leading to a denial of service. Version 1.0.0 contains a patch for the issue.
CVSS 6.5