EUVD-2025-206647

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Page.Preview.Js. This issue affects MediaWiki: from before 1.43.6, 1.44.3, 1.45.1...

Cross-Site Scripting (XSS)

shopware/shopware is vulnerable to persistent cross-site scripting. The vulnerability exists in renderer function in preview.js because the email field is not properly escaped which allows an attacker to inject and execute arbitrary javascript...