V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
← Back to List
Red Hat›Distributionredhat

Mediawiki-extensions-widgets

Vulnerabilities
1
Known exploited
0
Max CVSS
8.8
Top EPSS
0.01031

Severity breakdown

Critical
0
High
1
Medium
0
Low
0
Also matched as (raw): mediawiki-extensions-Widgets

Top vulnerabilities

CVE-2020-35625An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment.
View vendor →Open in catalog with product filter →