Skip to content
OpenAdvisories
Medium DSA-4651-1 1 CVE

mediawiki - security update

Published Apr 2, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 mediawiki 1:1.31.7-1~deb10u1

Vulnerabilities 1

  • Medium 5.3
    CVE-2020-10960

    MediaWiki makeCollapsible allows applying event handler to any CSS selector

    In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is shown or hidden in the user interface) to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCol…

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist