| Package | Affected versions | Patched versions |
|---|---|---|
| wikimedia/parsoid | ≥ 0.12, < 0.12.2< 0.11.1 | 0.12.20.11.1 |
| parsoid | ≥ 0.12.0, < 0.12.2< 0.11.1 | 0.12.20.11.1 |
An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free