| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | = 1.28.0= 1.28.1= 1.28.2= 1.29.0= 1.29.1≤ 1.27.3 |
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free