Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h7r7-gpvx-jr4p

Опубликовано: 18 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9

Описание

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - ImageRating Extension allows Stored XSS.This issue affects Mediawiki - ImageRating Extension: from master before 1.39.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - ImageRating Extension allows Stored XSS.This issue affects Mediawiki - ImageRating Extension: from master before 1.39.

EPSS

Процентиль: 22%
0.0007
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
4 месяца назад

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - ImageRating Extension allows Stored XSS.This issue affects Mediawiki - ImageRating Extension: from master before 1.39.

EPSS

Процентиль: 22%
0.0007
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-79