Unrated

An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly escap...

CVE-2021-42046 First seen on SecPulse Sep 29, 2022

Original description The description as published by the source.

An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly escaped and allowed for users to inject HTML and JavaScript.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory phabricator.wikimedia.org
patch gerrit.wikimedia.org
patch gerrit.wikimedia.org

Key facts

Severity: Unrated
Published: Sep 29, 2022
First seen on SecPulse: Sep 29, 2022

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54