medium6.1
CVE-2021-30458
An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2.
Impact
An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wikimedia | Parsoid | before 0.11.1 from 0.12.0 before 0.12.2 |