2 matches found
Unescaped message used in HTML within LogEventsList
More info at https://phabricator.wikimedia.org/T256171...
6.1CVSS7.2AI score0.01104EPSS
SaveExploits0Affected Software1
Authorization Bypass
mediawiki/core is vulnerable to authorization bypass. The vulnerability exists as the userCan function in includes/logging/LogEventsList.php does not properly check the user's permissions for the action...
6.5CVSS3.5AI score0.01382EPSS
SaveExploits0References5Affected Software2
20