CVE-2021-46146

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The WikibaseMediaInfo component is vulnerable to XSS via the caption fields for a given media file...

CVE-2021-46146

MediaWiki (WikibaseMediaInfo) is affected by an XSS vulnerability in caption handling for media files. Affected versions are MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The issue is due to WikibaseMediaInfo processing caption fields insecurely, enabling XSS. No exploi...

MediaWiki < 1.35.5, 1.36.x < 1.36.3, 1.37.x < 1.37.1 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...