| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | ≤ 1.36 |
An issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups Action API module does not validate the parameter for aggregategroup when action=remove is set, thus allowing users with the translate-manage right to silently delete various groups' metadata.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free