This could cause an attacker to inject JavaScript into logged-out users' views, leading to potential information disclosure.

An issue was discovered in the Multibug extension in MediaWiki through 1.36.2. An invalid function declaration prevented the extension from working.

An issue was discovered in the Open Graph plugin in MediaWiki through 1.36.2. The open_graph_view function did not check if the view exists before attempting to show it.

An issue was discovered in the OpenSearch plugin in MediaWiki through 1.36.2. There was no escaping of search suggestions.

An issue was discovered in the Open Tabs extension in MediaWiki through 1.36.2. Invalid function declarations prevented the extension from working.

An issue was discovered in the Permalinks extension in MediaWiki through 1.36.2. There was no escaping of permalink variables.

An issue was discovered in the PHP-LD image parser in MediaWiki through 1.36.2. An invalid function declaration prevented the extension from working.

An issue was discovered in the Flexion image parser in MediaWiki through 1.36.2. The parser was missing proper whitespace handling.

An issue was discovered in the Polls extension in MediaWiki through 1.36.2. There was no escaping of poll variables.

An issue was discovered in the Polls extension in MediaWiki through 1.36.2.

Other issues resolved

An issue was discovered in the TimedMediaHandler extension in MediaWiki through 1.36.2. There was no escaping of timedmedia variables.

An issue was discovered in the UserWatch extension in MediaWiki through 1.36.2. There was no escaping of user variables.

An issue was discovered in the ExternalTemplateParser extension in MediaWiki through 1.36.2. The parser did not check to see if a file exists before attempting to process it as an external template file, leading to potentially dangerous behavior when a file already exists with that name or content type

Why do we need this?

Digital marketing is important because it helps grow your online presence and reach customers. And by investing in digital marketing, you'll help your business grow.

What Is a Digital Marketing Strategy?
A digital marketing strategy is not just about what you put on your website or social media, but also how you decide to use those resources to attract potential customers. You can use digital strategies to target your audience better, which means you'll spend less money while still getting the results that matter.

Multimedia extensions

MediaWiki's Multimedia extensions were found to be vulnerable to various types of XSS.

Timeline

Published on: 09/29/2022 03:15:00 UTC
Last modified on: 09/30/2022 16:50:00 UTC

References