A vulnerability was found in Wikipedia 12.0 and classified as critical. This vulnerability affects the function
Search. The manipulation results in missing authentication.
This vulnerability is known as CVE-2018-25246. It is possible to launch the attack remotely. Furthermore, an exploit is available.