Description

The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension.

Remediation

References

CVE-2020-27957

Related Vulnerabilities

Dotclear Other Vulnerability (CVE-2006-2866)

WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.8)

Grafana Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-13379)

Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2513)

MediaWiki CVE-2023-45367 Vulnerability (CVE-2023-45367)

Severity

Medium

Classification

CVE-2020-27957 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities