medium6.1
CVE-2020-27620
The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped.
Impact
The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wfMessage and Html::rawElement, as demonstrated by CosmosSocialProfile::getUserGroups.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Skin\ | through 1.35.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gerrit.wikimedia.org/r/c/mediawiki/skins/Cosmos/+/634749
- https://gerrit.wikimedia.org/r/c/mediawiki/skins/Cosmos/+/634751
- https://gerrit.wikimedia.org/r/c/mediawiki/skins/Cosmos/+/634752
- https://phabricator.wikimedia.org/T265440
- https://gerrit.wikimedia.org/r/c/mediawiki/skins/Cosmos/+/634749
- https://gerrit.wikimedia.org/r/c/mediawiki/skins/Cosmos/+/634751
- https://gerrit.wikimedia.org/r/c/mediawiki/skins/Cosmos/+/634752
- https://phabricator.wikimedia.org/T265440