CVE-2023-37302

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3

published June 30, 2023

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a title attribute).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00689 · 52.2th percentile
Published
2023-06-30T00:00Z
EPSS history
Timeline
  • 30 JUN 00:00Z
    An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3
    cvelistv5