Medium severity6.1NVD Advisory· Published Apr 6, 2021· Updated Jun 17, 2026
CVE-2021-30154
CVE-2021-30154
Description
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header-* messages are output in HTML unescaped, leading to XSS.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- MediaWiki/MediaWikidescription
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- phabricator.wikimedia.org/T278014nvdExploitIssue TrackingPatchVendor Advisory
- security.gentoo.org/glsa/202107-40nvdThird Party Advisory
- www.debian.org/security/2021/dsa-4889nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/nvd
News mentions
0No linked articles in our index yet.