MediaWiki — Vulnerabilities & Security Advisories 19

MediaWiki serves as the collaborative platform behind Wikipedia, enabling content creation and management through wiki markup. Historically, it has faced vulnerabilities across multiple classes, including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation, often stemming from input validation flaws and insufficient access controls. The platform's open nature exposes it to constant scrutiny, with 19 CVEs recorded to date. Notable incidents have involved XSS vulnerabilities in parser functions and RCE through manipulated file uploads. MediaWiki's security model emphasizes granular permissions and extensive logging, though its complexity and extensibility through third-party extensions continue to present challenges for maintainers and administrators alike.