Skip to content
OpenAdvisories

Archive

30 June 2023

Vulnerabilities first published on this day (UTC), newest first.

83 results · Feed

  • Medium 6.1

    Joplin Cross-site Scripting vulnerability

    Joplin before 2.11.5 allows XSS via a USE element in an SVG document.

  • Medium 6.1

    MediaWiki Cross-site Scripting vulnerability

    An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a…

  • Unscored —

    An issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes/DoubleWiki.php allows XSS vi…