Количество 2
Количество 2
CVE-2025-21612
около 1 года назад
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when outputting, so an XSS payload as the page name can be used here. This vulnerability is fixed in 2.7.2.
CVSS3: 8.6
EPSS: Низкий
GHSA-4x6x-8rm8-c37j
около 1 года назад
Extension:TabberNeue vulnerable to Cross-site Scripting
CVSS3: 8.6
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-21612 TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when outputting, so an XSS payload as the page name can be used here. This vulnerability is fixed in 2.7.2. | CVSS3: 8.6 | 0% Низкий | около 1 года назад |
| GHSA-4x6x-8rm8-c37j Extension:TabberNeue vulnerable to Cross-site Scripting | CVSS3: 8.6 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу
20