EUVD-2020-20449

Malware in sbrugna...

BIT-MEDIAWIKI-2020-27957

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension...

MediaWiki RandomGameUnit Cross-Site Scripting Vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki RandomGameUnit versi...

CVE-2020-27957

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension...

CVE-2020-27957

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension...

Cross site scripting

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension...

CVE-2020-27957

Summary of concrete details (CVE-2020-27957): The issue affects the MediaWiki RandomGameUnit extension (versions through 1.35). The vulnerability arises from improper escaping of title-related data, enabling stored XSS when certain game types are created within MediaWiki. Several sources (OSV, CN...

CVE-2020-27957

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension...

CVE-2020-27957

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension...

CVE-2020-27957: Improper Neutralization of Input During Web Page Generation

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension...

PT-2020-16880 · Mediawiki +2 · Randomgameunit +2

Name of the Vulnerable Software and Affected Versions: MediaWiki extension RandomGameUnit versions through 1.35 Description: The issue concerns the RandomGameUnit extension for MediaWiki, where certain title-related data was not properly escaped. This allowed for the manipulation of game names or...