Lucene search
+L

1 matches found

OSV
OSV
added 2022/05/24 4:49 p.m.7 views

GHSA-2RM7-XXX8-35JH MediaWiki Cross-site Scripting (XSS)

Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

6.1CVSS5.9AI score0.01285EPSS
SaveExploits0References7
Rows per page
Query Builder