Description (CNA)
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Wikimedia Foundation / Mediawiki - LanguageSelector Extension | affected master before 1.39 |
CWE
CWE-74
References
- https://gerrit.wikimedia.org/r/q/I338288e756de4e58a3f1f02a9c205b37f4927935
- https://phabricator.wikimedia.org/T399724
ADP enrichment
No English description supplied.
No references supplied.