EUVD-2022-2633

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

mediawiki is vulnerable to cross-site scripting XSS. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a tag, bypassing sanitization steps, and potentially allowing for XSS...

CVE-2021-30458

An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a tag, bypassing sanitization steps, and potentially allowing for XSS...

PT-2021-18735

Name of the Vulnerable Software and Affected Versions Wikimedia Parsoid versions prior to 0.11.1 Wikimedia Parsoid versions 0.12.x prior to 0.12.2 Description An issue allows an attacker to send crafted wikitext that will be transformed by Utils/WTUtils.php using a tag, bypassing sanitization...

CVE-2021-30458: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a tag, bypassing sanitization steps, and potentially allowing for XSS...