CVE-2020-27957

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension...

CVE-2020-27957

Summary of concrete details (CVE-2020-27957): The issue affects the MediaWiki RandomGameUnit extension (versions through 1.35). The vulnerability arises from improper escaping of title-related data, enabling stored XSS when certain game types are created within MediaWiki. Several sources (OSV, CN...