未評価
An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36. Within several special pages, a privileged user could inject arbit...
CVE-2021-36131
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36. Within several special pages, a privileged user could inject arbitrary HTML and JavaScript within various data fields. The attack could easily propagate across many pages for many users.
参照URL
- patch gerrit.wikimedia.org
- patch phabricator.wikimedia.org