Mobilefrontend

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-14807 Aug 09, 21:15 MEDIUM PATCH This Month

In the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit summary field in includes/specials/MobileSpecialPageFeed.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP XSS Mediawiki Mobilefrontend

NVD

CVSS 3.1

6.1

EPSS

0.7%

CVE-2019-14807

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

In the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit summary field in includes/specials/MobileSpecialPageFeed.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP XSS Mediawiki +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy