https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:58:22.644997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-21710 CVE-2022-21710 — Cross-site Scripting in ShortDescription extension 2026-10-06T16:58:22.662375+00:00

Affected: StarCitizenTools mediawiki-extensions-ShortDescription

ShortDescription is a MediaWiki extension that provides local short description support. A cross-site scripting (XSS) vulnerability exists in versions prior to 2.3.4. On a wiki that has the ShortDescription enabled, XSS can be triggered on any page or the page with the action=info parameter, which displays the shortdesc property. This is achieved using the wikitext `{{SHORTDESC:<img src=x onerror=alert()>}}`. This issue has a patch in version 2.3.4.