mediawiki-extensions-TabberNeue vulnerabilities
2 known vulnerabilities in mediawiki-extensions-TabberNeue from StarCitizenTools. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score
Latest first
- 8.6 High severity
mediawiki-extensions-TabberNeue: Improper Neutralization of Input During Web Page Generation
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the `<tabber>` tag. Version 3.1.1
- 8.6 High severity
mediawiki-extensions-TabberNeue: Improper Neutralization of Input During Web Page Generation
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when outputting, so an XSS payload as the page name can be used here. This vulnerability is fixed in 2.7.2.