CVE-2021-45474

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter

published December 24, 2021

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01002 · 62.5th percentile
Published
2021-12-24T01:03Z
EPSS history
Timeline
  • 24 DEC 01:03Z
    In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter
    cvelistv5