CVE-2021-31551

An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads for Token-related query parameters allowed for XSS on certain PageForms-managed MediaWiki pages...

Design/Logic Flaw

An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads for Token-related query parameters allowed for XSS on certain PageForms-managed MediaWiki pages...

CVE-2021-31551

Summary of CVE-2021-31551 (PageForms/XSS in MediaWiki) : The vulnerability affects the PageForms extension for MediaWiki up to version 1.35.2 . Crafted payloads targeting Token-related query parameters can cause cross-site scripting (XSS) on certain pages managed by PageForms. The initial documen...

CVE-2021-31551

An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads for Token-related query parameters allowed for XSS on certain PageForms-managed MediaWiki pages...

CVE-2021-31551: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads for Token-related query parameters allowed for XSS on certain PageForms-managed MediaWiki pages...

PT-2021-19422 · Mediawiki +1 · Pageforms +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35.2 PageForms extension for MediaWiki versions through 1.35.2 Description: An issue was discovered in the PageForms extension for MediaWiki, allowing for XSS on certain PageForms-managed MediaWiki pages. This is...

MediaWiki 跨站脚本漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki version 1.35.2 and prior versions, which allows t...