CVE-2019-14807

MEDIUM 6.1CVE-2019-14807 · Published 09/08/2019 · updated 17/06/2026

In short

CVE-2019-14807 is a MEDIUM (CVSS 6.1) vulnerability affecting mobilefrontend (mediawiki).
Chance of exploitation in the next 30 days (EPSS): 0.70%, higher than 53.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mobilefrontend mediawiki	`≥ 1.31.0, ≤ 1.33.0`	No fix yet

Description

In the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit summary field in includes/specials/MobileSpecialPageFeed.php.

References

gerrit.wikimedia.org/g/mediawiki/extensions/MobileFrontend/+/08dfc59771d0ed9b739a59bb521baf7f59d169f9 · Third Party Advisory
phabricator.wikimedia.org/T229541 · Patch

More vulnerabilities in mobilefrontend

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free