Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2020/12/18 5:40 p.m.23 views

CVE-2020-35478

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink. This affects MediaWiki 1.33.0 and later...

6.1CVSS1.4AI score0.01353EPSS
SaveExploits1References4
NVD
NVD
added 2020/12/18 8:15 a.m.18 views

CVE-2020-35478

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink. This affects MediaWiki 1.33.0 and later...

6.1CVSS5.9AI score0.01353EPSS
SaveExploits1References3
OSV
OSV
added 2020/12/18 8:15 a.m.26 views

CVE-2020-35478

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink. This affects MediaWiki 1.33.0 and later...

6.1CVSS5.6AI score
SaveExploits0References3
Prion
Prion
added 2020/12/18 8:15 a.m.23 views

Design/Logic Flaw

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink. This affects MediaWiki 1.33.0 and later...

4.3CVSS6AI score0.01353EPSS
SaveExploits1References3Affected Software2
Rows per page
Query Builder