Security Advisory

CVE-2021-30458

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-09 06:06:04

Last updated 2024-08-03 22:32:41

Assigner mitre

State PUBLISHED

Description

An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.

← Browse all CVEs View on cve.org ↗