Products: 3
Vulnerabilities: 4
Known Exploited: 0
1
Critical Level Threats
1
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2022-42985
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting (XSS).
Last Modified: Apr 25, 2025
Published: Nov 17, 2022
CVE-2021-46252
A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attackers to modify account request requirement bypasses.
Last Modified: Nov 21, 2024
Published: Feb 15, 2022
CVE-2020-15179
HTML Injection in ScratchSig
Last Modified: Nov 21, 2024
Published: Sep 15, 2020
CVE-2020-15164
Authentication Bypass in Scratch Login (mediawiki-scratch-login)
Last Modified: Nov 21, 2024
Published: Aug 28, 2020
Items Per Page
