medium6.1
CVE-2019-19708
The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.
Impact
The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Visual Editor | through 1.34 |