11 matches found
EUVD-2020-23288
Malware in sbrugna...
CVE-2020-35622
An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS under certain conditions...
BIT-MEDIAWIKI-2020-35622
An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS under certain conditions...
MediaWiki cross-site scripting vulnerability (CNVD-2021-03034)
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki version 1.35.1 and...
CVE-2020-35622
An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS under certain conditions...
CVE-2020-35622
An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS under certain conditions...
Design/Logic Flaw
An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS under certain conditions...
CVE-2020-35622
An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS under certain conditions...
CVE-2020-35622
CVE-2020-35622 affects the MediaWiki GlobalUsage extension up to version 1.35.1. The issue arises in SpecialGlobalUsage.php where WikiMap::makeForeignLink uses the $page variable unsafely in formatItem, leaving it improperly escaped and enabling an XSS condition under certain inputs. The CVE is m...
PT-2020-17369 · Wikimedia +2 · Mediawiki +2
Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35.1 GlobalUsage extension for MediaWiki versions through 1.35.1 Description: An issue was discovered in the GlobalUsage extension for MediaWiki. The SpecialGlobalUsage.php file calls WikiMap::makeForeignLink...
MediaWiki 跨站脚本漏洞
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki version 1.35.1 and...