| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | = 1.28.0= 1.28.1= 1.28.2= 1.29.0= 1.29.1≤ 1.27.3 |
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free