CVE-2019-14807: Mediawiki Mobilefrontend

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

In the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit summary field in includes/specials/MobileSpecialPageFeed.php.

Affected products

• Mediawiki Mobilefrontend: from 1.31.0, up to and including 1.33.0

Published 2019-08-09. Last modified 2026-06-17.