Cross site scripting

2020-01-0802:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

29.3%

JSON

The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).

CPENameOperatorVersion
mediawikieq1.35

CPE	Name	Operator	Version
	mediawiki	eq	1.35

References

gerrit.wikimedia.org/r/558203

phabricator.wikimedia.org/T240773

0.001 Low

EPSS

Percentile

29.3%

JSON

Related for PRION:CVE-2020-6163