Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Mediawiki Subscribe
Filtered by product Skin\
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-27620 1 Mediawiki 1 Skin\ 2020-10-26 4.3 MEDIUM 6.1 MEDIUM
The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wfMessage and Html::rawElement, as demonstrated by CosmosSocialProfile::getUserGroups.