Widgets Project Widgets
2 CVEs affecting Widgets Project Widgets. Latest disclosed: 2020-02-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9382 | Medium | 5.4 | 2020-02-24 | An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widge… |
CVE-2015-6737 | | 2015-09-01 | Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors invo… |