PT-2022-22180

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.38.2 Description The issue concerns stored XSS that could occur via MediaWiki's template system. This happens when a new RSS feed with certain XSS payloads within its description tags is created and added to the...

PT-2022-19933

Name of the Vulnerable Software and Affected Versions MediaWiki RSS extension versions prior to 2022-04-29 Description The issue allows XSS via an rss element if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true. Recommendations For versions prior to 2022-04-29, update to a version...

CVE-2022-29969

The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true...