Design/Logic Flaw

2019-08-0921:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

29.5%

JSON

In the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit summary field in includes/specials/MobileSpecialPageFeed.php.

CPENameOperatorVersion
mobilefrontendge1.31.0
mobilefrontendle1.33.0

CPE	Name	Operator	Version
	mobilefrontend	ge	1.31.0
	mobilefrontend	le	1.33.0

References

gerrit.wikimedia.org/g/mediawiki/extensions/MobileFrontend/+/08dfc59771d0ed9b739a59bb521baf7f59d169f9

phabricator.wikimedia.org/T229541

0.001 Low

EPSS

Percentile

29.5%

JSON

Related for PRION:CVE-2019-14807