VYPR

WikibaseMediaInfo

by Wikimedia Foundation

CVEs (1)

  • CVE-2020-6163MedJan 8, 2020
    risk 0.40cvss 6.1epss 0.01

    The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).