CVE-2020-9382

The CVE-2020-9382 entry refers to the MediaWiki Widgets extension (versions up to 1.4.0). The issue is due to improper title sanitization, allowing any wiki page to be executed as a widget via the {{#widget:}} parser function. Affected component: Widgets extension for MediaWiki; root cause: title...