VYPR
Medium severity6.1NVD Advisory· Published Jun 26, 2023· Updated Jun 17, 2026

CVE-2023-36675

CVE-2023-36675

Description

An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • MediaWiki/Mediawikillm-fuzzy3 versions
    <1.35.11, 1.36.x through 1.38.x <1.38.7, 1.39.x <1.39.4+ 2 more
    • (no CPE)range: <1.35.11, 1.36.x through 1.38.x <1.38.7, 1.39.x <1.39.4
    • cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: <1.35.11
    • (no CPE)
  • Range: <1.35.11, 1.36.x through 1.38.x <1.38.7, 1.39.x <1.39.4
  • osv-coords
    Range: < 1.35.11

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.