Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Parameters injection in SyntaxHighlight results in multiple vulnerabilities
Vulnerability Description
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mediawiki SyntaxHighlight扩展安全漏洞
Vulnerability Description
MediaWiki是美国维基媒体（Wikimedia）基金会和MediaWiki志愿者共同开发维护的一套自由免费的基于网络的Wiki引擎，它可用于部署内部的知识管理和内容管理系统。SyntaxHighlight extension是其中的一个语法高亮显示扩展。 Mediawiki 1.28.1之前版本、1.27.2之前版本和1.23.16之前版本中的SyntaxHighlight扩展存在HTML注入漏洞，该漏洞源于没有充分的过滤用户提交的输入。攻击者可利用该漏洞在用户浏览器中执行任意脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A