Widgets

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-9382 MEDIUM POC PATCH This Month

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Widgets

NVD

CVSS 3.1

5.4

EPSS

1.0%

CVE-2015-6737 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors involving base64 encoded content. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Widgets

NVD

CVSS 2.0

4.3

EPSS

0.4%

CVE-2020-9382

EPSS 1% CVSS 5.4

MEDIUM POC PATCH This Month

Information Disclosure Widgets

NVD

CVE-2015-6737

EPSS 0% CVSS 4.3

MEDIUM This Month

XSS Widgets

NVD