CVE-2021-42047

Published: 2022-09-29T03:15Z

Last Modified: 2024-11-21T06:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in the Growth extension in MediaWiki through 1.36.2. On any Wiki with the Mentor Dashboard feature enabled, users can login with a mentor account and trigger an XSS payload (such as alert) via Growthexperiments-mentor-dashboard-mentee-overview-no-js-fallback. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt