CVE-2021-45472

In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that includes a $1 formatter substitution…

published December 24, 2021

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that includes a $1 formatter substitution marker, and the javascript: URL scheme (among others) can be used.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01002 · 62.5th percentile
Published
2021-12-24T01:04Z
EPSS history
Timeline
  • 24 DEC 01:04Z
    In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that includes a $1 formatter substitution…
    cvelistv5