What’s Vulnerable › Products

StarCitizenWiki mediawiki-extensions-EmbedVideo vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your StarCitizenWiki mediawiki-extensions-EmbedVideo version is affected

Latest StarCitizenWiki mediawiki-extensions-EmbedVideo vulnerabilities

• CVE-2026-57440 — Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled (CVSS 7.5)
• CVE-2026-55692 — EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled (CVSS 7.5)
• CVE-2026-55691 — EmbedVideo Extension : Stored XSS via unsanitized class passed to template (CVSS 8.6)
• CVE-2026-55690 — EmbedVideo Extension: Stored XSS via unsanitized service name in exception text (CVSS 7.5)
• CVE-2025-59839 — Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes (CVSS 5.4)