6.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.3%
The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).
gerrit.wikimedia.org/r/558203
phabricator.wikimedia.org/T240773