CVE-2020-9382: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget as defined by this extension via MediaWiki's widget: parser function...