PT-2022-22180

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.38.2 Description The issue concerns stored XSS that could occur via MediaWiki's template system. This happens when a new RSS feed with certain XSS payloads within its description tags is created and added to the...

CVE-2022-29969

The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true...