1 matches found
MGASA-2021-0086 Updated mediawiki packages fix security vulnerability
In MediaWiki before 1.31.11, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. The right colu...
7.5CVSS6.7AI score0.01573EPSS
SaveExploits2References5
20