[PHP:MEDIAWIKI-CORE-2020-10960] makeCollapsible allows applying event handler to any CSS selector

Severity Medium
Affected Packages 3
CVEs 1
makeCollapsible allows applying event handler to any CSS selector
Package Affected Version
pkg:composer/mediawiki/core >= 1.34.0, < 1.34.1
pkg:composer/mediawiki/core >= 1.31.0, < 1.31.7
pkg:composer/mediawiki/core >= 1.33.0, < 1.33.3
ID
PHP:MEDIAWIKI-CORE-2020-10960
Severity
medium
Severity from
CVE-2020-10960
URL
https://phabricator.wikimedia.org/T246602
Published
2020-03-26T14:02:20
(4 years ago)
Modified
2020-10-19T19:26:52
(3 years ago)
Rights
PHP Security Advisories Database Team
Other Advisories
Source # ID Name URL
Security Advisory https://phabricator.wikimedia.org/T246602
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:composer/mediawiki/core mediawiki core >= 1.34.0 < 1.34.1
Affected pkg:composer/mediawiki/core mediawiki core >= 1.31.0 < 1.31.7
Affected pkg:composer/mediawiki/core mediawiki core >= 1.33.0 < 1.33.3
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...