Skip to content
OpenAdvisories

Vendor

InternationalScratchWiki

2 known vulnerabilities.

Products

wiki-scratchsig 1 mediawiki-scratch-login 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2020-15179

    HTML Injection in ScratchSig

    The ScratchSig extension for MediaWiki before version 1.0.1 allows stored Cross-Site Scripting. Using <script> tag inside <scratchsig> tag, attackers with edit permission can execute scripts on visitors' browser. With MediaWiki JavaScript API, this can potent…

    InternationalScratchWiki wiki-scratchsig