CVE-2015-6731

CVE-2015-6731 concerns the MediaWiki SemanticForms extension. The vulnerability is an XSS flaw in several parameters exposed by forms: section_, template_ , label_*, new_template (Special:CreateForm) and target, alt_form (Special:FormEdit). The root cause is inadequate input filtering in these pa...

CVE-2015-6732

CVE-2015-6732 relates to multiple XSS vulnerabilities in the MediaWiki SemanticForms extension. The vulnerability allows remote attackers to inject arbitrary web script or HTML via (1) wpSummary on Special:FormEdit, (2) the Template label (optional) field, or (3) a Field name in a form/template. ...