cvedb.io
CVE-2026-22712
MEDIUM · CVSS 4.3
EPSS exploitation probability: 0%
Published 2026-01-09T00:15:45.837 · Last modified 2026-06-17T10:20:16.893

Summary

Improper Encoding or Escaping of Output due to magic word replacement in ParserAfterTidy vulnerability in The Wikimedia Foundation Mediawiki - ApprovedRevs Extension allows Input Data Manipulation.This issue affects Mediawiki - ApprovedRevs Extension: 1.45, 1.44, 1.43, 1.39.

Affected products

wikiworks — approved_revs

Does this affect you?

Add your gear to cvedb and we'll alert you only when wikiworks ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.