Previous work: T270466
| Maniphest ID | Extension or Skin | CVE ID | REL1_31 | REL1_35 | master
| ---- | ---- | ---- | ---- | ---- | ---- | --- | ---
| T279090 | [[ https://www.mediawiki.org/wiki/Extension:Replace_Text | ReplaceText ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-xxxxx | CVE-2021-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T281043 | [[ https://www.mediawiki.org/wiki/Extension:SocialProfile | SocialProfile ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-xxxxx | CVE-2021-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T281196 | [[ https://www.mediawiki.org/wiki/Extension:SportsTeams | SportsTeams ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-xxxxx | CVE-2021-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T280590 | [[ https://www.mediawiki.org/wiki/Extension:FileImporter | FileImporter ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-xxxxx | CVE-2021-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T281417 | [[ https://www.mediawiki.org/wiki/Extension:ManageWiki | ManageWiki ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29483 | CVE-2021-29483 ]] | No | No | [[ https://github.com/miraheze/ManageWiki/compare/99f3b2c8af18...befb83c66f5b.patch | Yes ]]
| Txxxxx | ext/skin | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-xxxxx | CVE-2021-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
**n.b.** While ReplaceText (T279090) is not Wikimedia production-deployed, it is [[ https://www.mediawiki.org/wiki/Bundled_extensions_and_skins | bundled ]] with the tarball releases.
**n.b.** Should T281923 be included?