Lucene search
+L
MediawikiShortdescription

1 matches found

CVE
CVE
added 2022/01/24 7:45 p.m.122 views

CVE-2022-21710

CVE-2022-21710 affects the MediaWiki ShortDescription extension. Versions prior to 2.3.4 are vulnerable to a cross-site scripting (XSS) flaw when ShortDescription is enabled, allowing an attacker to trigger XSS on any page or on the page shown by action=info using the wikitext payload {{SHORTDESC...

6.1CVSS5.2AI score0.01EPSS
Save