VE
Product
Visual Editor
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch
Add Visual Editor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-61655 | 6.1 | Feb 3 | Stored XSS through system messages in VisualEditor Affected: 1.39.0 before 1.39.14; 1.43.0 before 1.43.4; 1.44.0 |
| CVE-2025-61656 | 6.1 | Feb 3 | XSS when pasting into VE Affected: 1.39.0 before 1.39.14; 1.43.0 before 1.43.4; 1.44.0 |
| CVE-2019-19708 | 6.1 | Dec 11 | The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute Affected: through 1.34 |
Showing 3