CVE-2025-53093
TabberNeue vulnerable to Stored XSS through wikitext
Résumé
TabberNeue vulnerable to Stored XSS through wikitext
Description d'origine
La description telle que publiée par la source (souvent en anglais).
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the `` tag. Version 3.1.1 contains a patch for the bug.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com
- web github.com
- web github.com