2 results (0.014 seconds)

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 1

CVE-2019-15124

https://notcve.org/view.php?id=CVE-2019-15124

19 Mar 2020 — In the MobileFrontend extension for MediaWiki, XSS exists within the edit summary field of the watchlist feed. This affects REL1_31, REL1_32, and REL1_33. En la extensión MobileFrontend para MediaWiki, se presenta una vulnerabilidad de tipo XSS dentro del campo edit summary del feed watchlist. Esto afecta a las versiones REL1_31, REL1_32 y REL1_33. • https://phabricator.wikimedia.org/T230576 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-14807

https://notcve.org/view.php?id=CVE-2019-14807

09 Aug 2019 — In the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit summary field in includes/specials/MobileSpecialPageFeed.php. En la extensión MobileFrontend versiones 1.31 hasta 1.33 para MediaWiki, presenta una vulnerabilidad de tipo XSS dentro del campo edit summary en el archivo includes/specials/MobileSpecialPageFeed.php. • https://gerrit.wikimedia.org/g/mediawiki/extensions/MobileFrontend/+/08dfc59771d0ed9b739a59bb521baf7f59d169f9 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •