CNNVD-202601-1163 Information

CNNVD ID

CNNVD-202601-1163

CVE-2026-0670

  • CNNVD Published: 2026-01-07

Description (Chinese)

MediaWiki - ProofreadPage Extension是MediaWiki开源的一个文档对照插件。 MediaWiki - ProofreadPage Extension 1.45版本、1.44版本、1.43版本和1.39版本存在安全漏洞,该漏洞源于输入中和不当,可能导致跨站脚本攻击。

Description (English)

MediaWiki - ProofreadPage Exchange is a document control plugin for MediaWiki open source. MediaWiki - ProofreadPage Extension 1.45, 1.44, 1.43 and 1.39 have a security loophole, which stems from the insufficiency of the input and may lead to a cross-site scrip attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2026-01-07

Last Modified

2026-02-24

References

https://gerrit.wikimedia.org/r/q/I7c028db5ed81843aacd596b0ee4dc2980f5b6e3c https://phabricator.wikimedia.org/T409423

Patch

https://phabricator.wikimedia.org/T409423

Share on: