← All advisories

Medium severity4.8NVD Advisory· Published Nov 24, 2020· Updated Jun 17, 2026

CVE-2020-29002

CVE-2020-29002

Description

includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

MediaWiki/CologneBluellm-fuzzy
Range: <1.35
Wikimedia Foundation/Mediawikillm-fuzzy
Range: <1.35
osv-coords
pkg:bitnami/mediawiki
Range: < 1.35.1
MediaWiki/MediaWikidescription
MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Range: <=1.35

Patches

Vulnerability mechanics

References

2

gerrit.wikimedia.org/r/q/Ie798a4f16d0ac2a4871aefeb593d962966aeb6b0nvdPatchVendor Advisory
phabricator.wikimedia.org/T267278nvdExploitIssue TrackingPatchVendor Advisory

News mentions

0

No linked articles in our index yet.