CVE-2019-14807

CVE-2019-14807 concerns the MediaWiki MobileFrontend extension (versions 1.31–1.33). The vulnerability is a cross-site scripting flaw in the edit summary field of includes/specials/MobileSpecialPageFeed.php, caused by a lack of proper validation of client-side data. Documents indicate the issue, ...

CVE-2019-15124

The CVE-2019-15124 entry refers to a stored/reflected cross-site scripting (XSS) vulnerability in the MobileFrontend extension for MediaWiki, specifically in the edit summary field of the watchlist feed. Affected branches are REL1_31, REL1_32, and REL1_33. The vulnerability arises from XSS in the...