CVE-2021-36131

The CVE-2021-36131 entry concerns MediaWiki’s SportsTeams extension (up to version 1.36). A privilege user could inject arbitrary HTML and JavaScript into various data fields on several special pages, allowing cross-page propagation to many pages and users. The root cause is an XSS in how data fi...