CVE-2020-9382: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget as defined by this extension via MediaWiki's widget: parser function...

PT-2020-20624

Name of the Vulnerable Software and Affected Versions Widgets extension versions 1.4.0 and earlier Description An issue was discovered in the Widgets extension for MediaWiki, where improper title sanitization allowed for the execution of any wiki page as a widget via MediaWiki's widget: parser...