Lucene search

K
cvelistMitreCVELIST:CVE-2020-35478
HistoryDec 18, 2020 - 7:33 a.m.

CVE-2020-35478

2020-12-1807:33:43
mitre
www.cve.org
6
mediawiki
xss
blocklogformatter.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

47.8%

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki 1.33.0 and later.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

47.8%