PT-2022-19902 · Mediawiki +1 · Mediawiki Private Domains Extension +1

Name of the Vulnerable Software and Affected Versions: MediaWiki Private Domains extension versions through 1.37.2 Description: The issue allows for Cross-Site Request Forgery CSRF attacks, enabling an attacker to edit pages that store the extension's configuration. This can be achieved by...