CVE-2022-29969

The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true...

PT-2022-19933

Name of the Vulnerable Software and Affected Versions MediaWiki RSS extension versions prior to 2022-04-29 Description The issue allows XSS via an rss element if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true. Recommendations For versions prior to 2022-04-29, update to a version...