medium5.4
CVE-2020-9382
An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki.
Impact
An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's {{#widget:}} parser function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Widgets Project | Widgets | through 1.4.0 |