CVE-2021-46146

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1

published January 7, 2022

CVSS
—
EPSS
1%
Percentile
46.5
In the wild
Unconfirmed
What it is

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The WikibaseMediaInfo component is vulnerable to XSS via the caption fields for a given media file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00571 · 46.5th percentile
Published
2022-01-07T05:53Z
EPSS history
Timeline
  • 07 JAN 05:53Z
    An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1
    cvelistv5