https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-43861.htmlhttps://patchthecve.com/cve/CVE-2025-43861.htmlWed, 17 Jun 2026 09:24:39 +0000MEDIUM 4.4: ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes" dialohttps://patchthecve.com/cve/CVE-2025-32964.htmlhttps://patchthecve.com/cve/CVE-2025-32964.htmlWed, 17 Jun 2026 09:12:52 +0000MEDIUM 4.6: ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 00bebea, when enabling a conflicting extension, a restricted extension would be automatically disabled even if the user did not hold the ManageWiki-restricted right. This issue has been patched in commit 00bebea. A whttps://patchthecve.com/cve/CVE-2025-32956.htmlhttps://patchthecve.com/cve/CVE-2025-32956.htmlWed, 17 Jun 2026 09:12:51 +0000HIGH 8.0: ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace in Special:ManageWiki/namespaces when using a page prefix (namespace name, which is the current namespace you are renaming) with an injection https://patchthecve.com/cve/CVE-2024-25109.htmlhttps://patchthecve.com/cve/CVE-2024-25109.htmlWed, 17 Jun 2026 07:15:31 +0000MEDIUM 6.5: ManageWiki is a MediaWiki extension allowing users to manage wikis. Special:ManageWiki does not escape escape interface messages on the `columns` and `help` keys on the form descriptor. An attacker may exploit this and would have a cross site scripting attack vector. Exploiting this on-wiki requires