CVE-2020-6163

Publication date

2020-01-08 01:45:12

Family

mitre

State

PUBLISHED

Description

The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).