PT-2020-20624

Name of the Vulnerable Software and Affected Versions Widgets extension versions 1.4.0 and earlier Description An issue was discovered in the Widgets extension for MediaWiki, where improper title sanitization allowed for the execution of any wiki page as a widget via MediaWiki's widget: parser...

DEBIAN-CVE-2011-1580

The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request...