← All advisories

Medium severity6.1NVD Advisory· Published Apr 29, 2022· Updated Jun 17, 2026

CVE-2022-29907

CVE-2022-29907

Description

The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

MediaWiki/Nimbus skinllm-fuzzy
Range: <=1.37.2
osv-coords
pkg:bitnami/mediawiki
Range: < 1.37.3
MediaWiki/Nimbus skindescription
MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Range: <=1.37.2

Patches

Vulnerability mechanics

References

2

phabricator.wikimedia.org/T306815nvdExploitPatchThird Party Advisory
gerrit.wikimedia.org/r/c/786959nvdVendor Advisory

News mentions

0

No linked articles in our index yet.