12 matches found
CVE-2022-42985
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...
EUVD-2022-46034
Malicious code in bioql PyPI...
MediaWiki Cross-Site Scripting Vulnerability (CNVD-2022-80687)
MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems.MediaWiki version 1.1 contains a cross-site scripting vulnerability, which stems from the ScratchLogin...
CVE-2022-42985
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...
CVE-2022-42985
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...
CVE-2022-42985
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...
CVE-2022-42985
The CVE-2022-42985 entry concerns the ScratchLogin extension for MediaWiki (versions up to 1.1 and earlier). The root issue is that verification failure messages are not escaped, which allows users with administrator privileges to perform cross-site scripting (XSS). Documented impact is XSS with ...
CVE-2022-42985: Improper Neutralization of Input During Web Page Generation
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...
CVE-2022-42985
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...
MediaWiki cross-site scripting vulnerabilities
MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems.MediaWiki version 1.1 contains a cross-site scripting vulnerability, which stems from the ScratchLogin...
PT-2022-26695 · Mediawiki · Scratchlogin Extension
Name of the Vulnerable Software and Affected Versions: ScratchLogin extension versions 1.1 and earlier for MediaWiki Description: The issue allows users with administrator privileges to perform cross-site scripting XSS due to the failure to escape verification failure messages. Recommendations: F...
