Description
An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor could introduce XSS payloads into various layers.
Unscored
CVE-2021-31550
EUVD-2021-18447GHSA-j4x7-chwp-xcr5
An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor co…
Published Apr 22, 2021 · Updated Aug 3, 2024 · Assigned by mitre