Servers and applications
CVE-2021-41798
MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.
- Severity
- Medium 6.1
- Published
- 11 Oct 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 1.36.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki |
|