CVE-2020-29002 - includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator

MEDIUM

includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator

Published Nov 24, 2020

4.8

MEDIUM

CVSS 3.1

EPSS 0.53%

includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21384		Advisory
https://gerrit.wikimedia.org/r/q/Ie798a4f16d0ac2a4871aefeb593d962966aeb6b0		x_refsource_MISCPatchVendor Advisory
https://phabricator.wikimedia.org/T267278		x_refsource_MISCExploitIssue TrackingPatchVendor Advisory