Количество 5
Количество 5
CVE-2020-25815
An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().
CVE-2020-25815
An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().
CVE-2020-25815
An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().
CVE-2020-25815
An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34 ...
GHSA-2f58-vf6g-6p8x
MediaWiki Cross-site Scripting (XSS) vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2020-25815 An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text(). | CVSS3: 6.1 | 0% Низкий | больше 5 лет назад | |
CVE-2020-25815 An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text(). | CVSS3: 6.1 | 0% Низкий | больше 5 лет назад | |
CVE-2020-25815 An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text(). | CVSS3: 6.1 | 0% Низкий | больше 5 лет назад | |
CVE-2020-25815 An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34 ... | CVSS3: 6.1 | 0% Низкий | больше 5 лет назад | |
GHSA-2f58-vf6g-6p8x MediaWiki Cross-site Scripting (XSS) vulnerability | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу