CVE-2022-42985

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...

EUVD-2022-46034

Malicious code in bioql PyPI...

MediaWiki Cross-Site Scripting Vulnerability (CNVD-2022-80687)

MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems.MediaWiki version 1.1 contains a cross-site scripting vulnerability, which stems from the ScratchLogin...

CVE-2022-42985

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...

CVE-2022-42985

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...

CVE-2022-42985: Improper Neutralization of Input During Web Page Generation

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...

MediaWiki 跨站脚本漏洞

MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems.MediaWiki version 1.1 contains a cross-site scripting vulnerability, which stems from the ScratchLogin...

CVE-2022-42985

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...

CVE-2022-42985

The CVE-2022-42985 entry concerns the ScratchLogin extension for MediaWiki (versions up to 1.1 and earlier). The root issue is that verification failure messages are not escaped, which allows users with administrator privileges to perform cross-site scripting (XSS). Documented impact is XSS with ...

CVE-2022-42985

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...

PT-2022-26695 · Mediawiki · Scratchlogin Extension

Name of the Vulnerable Software and Affected Versions: ScratchLogin extension versions 1.1 and earlier for MediaWiki Description: The issue allows users with administrator privileges to perform cross-site scripting XSS due to the failure to escape verification failure messages. Recommendations: F...