Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Widgets Project Subscribe
Filtered by product Widgets
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-9382 1 Widgets Project 1 Widgets 2021-07-21 5.5 MEDIUM 5.4 MEDIUM
An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's {{#widget:}} parser function.
CVE-2015-6737 1 Widgets Project 1 Widgets 2016-12-07 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors involving base64 encoded content.