CVE-2021-36131

An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36

published July 2, 2021

CVSS
—
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36. Within several special pages, a privileged user could inject arbitrary HTML and JavaScript within various data fields. The attack could easily propagate across many pages for many users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00447 · 37.9th percentile
Published
2021-07-02T13:00Z
EPSS history
Timeline
  • 02 JUL 13:00Z
    An XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36
    cvelistv5