CVE-2021-36130

CVE-2021-36130 is an XSS vulnerability in the MediaWiki SocialProfile extension (through version 1.36). A privileged user with the awardmanage right could inject arbitrary HTML/JavaScript into various gift-related data fields on several gift-related pages, with the attack potentially propagating ...