The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
XSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is mishandled during regex section line replacement from PageGateway. Using crafted HTML, an attacker can elicit an XSS attack via jQuery's parseHTML method, which can cause image callbacks to fire even without the element being appended to the DOM.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Mediawiki | — | Upgrade MediaWiki to the latest version | Oct 7, 2020 | Sep 27, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub