Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-333p-mjpr-3q3c

Опубликовано: 08 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 10

Описание

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension allows Cross-Site Scripting (XSS).This issue affects non release branches.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension allows Cross-Site Scripting (XSS).This issue affects non release branches.

EPSS

Процентиль: 15%
0.00047
Низкий

10 Critical

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
6 дней назад

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension allows Cross-Site Scripting (XSS). The issue has been remediated on the `master` branch, and in the release branches for MediaWiki versions 1.43, 1.44, and 1.45.

EPSS

Процентиль: 15%
0.00047
Низкий

10 Critical

CVSS4

Дефекты

CWE-79