| Package | Affected versions | Patched versions |
|---|---|---|
| visual editor | ≤ 1.34 |
The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free