Description

The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Special:CreatePoll or Special:UpdatePoll.

Remediation

References

CVE-2020-29003

Related Vulnerabilities

WordPress Plugin YARPP-Yet Another Related Posts Cross-Site Scripting (5.30.2)

WordPress Plugin WPtouch Backdoor (1.9.28)

WordPress Plugin Simple Events Calendar SQL Injection (1.4.0)

WordPress Plugin link-list-manager Cross-Site Scripting (1.0)

Joomla! Core Privilege Escalation (1.6.0 - 3.6.4)

Severity

Medium

Classification

CVE-2020-29003 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities