CVE-2021-36130

An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36

published July 2, 2021

CVSS
—
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36. Within several gift-related special pages, a privileged user with the awardmanage right could inject arbitrary HTML and JavaScript within various gift-related data fields. The attack could easily propagate across many pages for many users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00548 · 45.1th percentile
Published
2021-07-02T13:00Z
EPSS history
Timeline
  • 02 JUL 13:00Z
    An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36
    cvelistv5