Lucene search
+L

49 matches found

RedhatCVE
RedhatCVE
•added 2020/03/02 10:41 a.m.•49 views

CVE-2019-19708

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute...

6.1CVSS3.8AI score0.00716EPSS
SaveExploits1References3
CNVD
CNVD
•added 2019/12/16 12:00 a.m.•18 views

MediaWiki VisualEditor Cross-Site Scripting Vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. The product can be used to deploy in-house knowledge management and content management systems.VisualEditor is a rich text editor extension used in it. A cross-site...

6.1CVSS6.3AI score0.00716EPSS
SaveExploits1References1
OSV
OSV
•added 2019/12/11 2:15 a.m.•16 views

CVE-2019-19708

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute...

6.1CVSS6.4AI score0.00716EPSS
SaveExploits1References2
NVD
NVD
•added 2019/12/11 2:15 a.m.•41 views

CVE-2019-19708

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute...

6.1CVSS6.1AI score0.00716EPSS
SaveExploits1References2
Prion
Prion
•added 2019/12/11 2:15 a.m.•34 views

Cross site scripting

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute...

4.3CVSS5.9AI score0.00716EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2019/12/11 1:33 a.m.•40 views

CVE-2019-19708

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute...

6.1AI score0.00716EPSS
SaveExploits1References2
CVE
CVE
•added 2019/12/11 1:33 a.m.•112 views

CVE-2019-19708

The CVE-2019-19708 issue affects the VisualEditor extension for MediaWiki up to version 1.34. The vulnerability arises from improper handling of pasted content, allowing cross-site scripting (XSS) through an element containing a data-ve-clipboard-key attribute. Affected component: VisualEditor in...

6.1CVSS5.9AI score0.00716EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/11 12:00 a.m.•8 views

CVE-2019-19708: Improper Neutralization of Input During Web Page Generation

The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute...

6.1CVSS6.4AI score0.00716EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/12/11 12:00 a.m.•7 views

PT-2019-15922

Name of the Vulnerable Software and Affected Versions MediaWiki VisualEditor extension versions through 1.34 Description The issue allows for XSS attacks via pasted content containing an element with a data-ve-clipboard-key attribute. Recommendations For versions through 1.34, update to a version...

6.1CVSS0.00716EPSS
SaveExploits1References4
Rows per page
Query Builder