← Back to CVE List

CVE-2020-35478

Published: 2020-12-18T08:15Z
Last Modified: 2024-11-21T05:27Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki 1.33.0 and later. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt