Unscored CVE-2020-6163 EUVD-2020-27317GHSA-grfp-qrv2-2w59

The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget temp…

Published Jan 8, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).

References

https://phabricator.wikimedia.org/T240773
https://gerrit.wikimedia.org/r/558203