Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fmf5-9m5j-xgw3

Опубликовано: 08 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9

Описание

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Score Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Score Extension.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Score Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Score Extension.

EPSS

Процентиль: 15%
0.00047
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
5 дней назад

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Score Extension allows Cross-Site Scripting (XSS). The issue has been remediated on the `master` branch, and in the release branches for MediaWiki versions 1.43, 1.44, and 1.45.

EPSS

Процентиль: 15%
0.00047
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-79