Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2021-30157

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-filter-* label messages are output in HTML unescaped, leading to cross-site scripting (XSS).

Source

Severity Medium

Remote Yes

Type Cross-site scripting

Description

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-filter-* label messages are output in HTML unescaped, leading to cross-site scripting (XSS).

AVG-1775 mediawiki 1.35.1-2 Medium Vulnerable

https://phabricator.wikimedia.org/T278058
https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/b9ca6e0e4201502f2149ea68f26e4428072fd0bd%5E%21/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

Vulmon Search

About

Products

Connect