Security Advisory

CVE-2020-27620

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-22 03:05:10

Last updated 2024-08-04 16:18:44

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wfMessage and Html::rawElement, as demonstrated by CosmosSocialProfile::getUserGroups.

← Browse all CVEs View on cve.org ↗