Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-37302
HistoryJun 30, 2023 - 5:15 p.m.

Design/Logic Flaw

2023-06-3017:15:00
PRIOn knowledge base
www.prio-n.com
3
xss vulnerability
wikibase
mediawiki

0.001 Low

EPSS

Percentile

25.2%

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a title attribute).

CPENameOperatorVersion
mediawikile1.39.3

0.001 Low

EPSS

Percentile

25.2%

Related for PRION:CVE-2023-37302