https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:44:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-204673 EUVD-2026-204673 https://cve.radiocsirt.org/vuln/euvd-2026-204673 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37251 <p>An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not properly escape JavaScript in the onclick handler and does not prevent use of javascript: URLs.</p> <p>An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not properly escape JavaScript in the onclick handler and does not prevent use of javascript: URLs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-37251 https://cve.radiocsirt.org/vuln/ghsa-9f9w-jm83-5247 <p>An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not properly escape JavaScript in the onclick handler and does not prevent use of javascript: URLs.</p> <p>An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not properly escape JavaScript in the onclick handler and does not prevent use of javascript: URLs.</p> https://cve.radiocsirt.org/vuln/ghsa-9f9w-jm83-5247 https://cve.radiocsirt.org/vuln/gsd-2023-37251 gsd-2023-37251 https://cve.radiocsirt.org/vuln/gsd-2023-37251 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1695 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Angriffe mit unspezifischen Auswirkungen auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Angriffe mit unspezifischen Auswirkungen auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1695