Lucene search
MitreCVELIST:CVE-2023-37302HistoryJun 30, 2023 - 12:00 a.m.
CVE-2023-37302
2023-06-3000:00:00
mitre
www.cve.org
xss
wikibase
mediawiki
sitelinksview.php
crafted badge
title attribute
escaping
malicious code
0.001 Low
EPSS
Percentile
25.2%
An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a title attribute).
Related
osv
osv
MediaWiki Cross-site Scripting vulnerability
2023-06-30 18:31:02
BIT-mediawiki-2023-37302
2024-03-06 10:59:59
CVE-2023-37302
2023-06-30 17:15:09
ubuntucve
ubuntucve
CVE-2023-37302
2023-06-30 00:00:00
nvd
nvd
CVE-2023-37302
2023-06-30 17:15:09
cve
cve
CVE-2023-37302
2023-06-30 17:15:09
prion
prion
Design/Logic Flaw
2023-06-30 17:15:00
veracode
veracode
Cross-site Scripting (XSS)
2023-07-12 09:14:53
github
github
MediaWiki Cross-site Scripting vulnerability
2023-06-30 18:31:02