CVE-2019-12471

Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS

published July 10, 2019

CVSS
—
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01285 · 69.9th percentile
Published
2019-07-10T15:49Z
EPSS history
Timeline
  • 10 JUL 15:49Z
    Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS
    cvelistv5