CVE-2020-9382

CVE-2020-9382

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki’s {{#widget:}} parser function.

Source: CVE-2020-9382

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다