Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g4pp-wpp3-gj6f

Опубликовано: 14 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - OpenBadges Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - OpenBadges Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - OpenBadges Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - OpenBadges Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.

EPSS

Процентиль: 30%
0.00113
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.3
nvd
около 1 года назад

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - OpenBadges Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - OpenBadges Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.

EPSS

Процентиль: 30%
0.00113
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-79