← All advisories

Unrated severityNVD Advisory· Published Oct 11, 2021· Updated Aug 4, 2024

CVE-2021-41798

CVE-2021-41798

Description

MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

MediaWiki/MediaWikidescription
MediaWiki/Mediawikillm-fuzzy
Range: <1.36.2
osv-coords
pkg:bitnami/mediawiki
Range: < 1.36.2

Patches

Vulnerability mechanics

References

5

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJDYJQWT43GBD6GNQ4OW7JOZ6WQ6DZTN/mitrevendor-advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDBPECBWN6LWNSWIQMVXK6PP4YFEUYHA/mitrevendor-advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNEAI2T3Y65I55ZB6UE6RMC662RZTGRX/mitrevendor-advisory
security.gentoo.org/glsa/202305-24mitrevendor-advisory
phabricator.wikimedia.org/T285515mitre

News mentions

0

No linked articles in our index yet.