https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:22:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-246033 EUVD-2026-246033 https://cve.radiocsirt.org/vuln/euvd-2026-246033 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53093 <p>TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the `&lt;tabber&gt;` tag. Version 3.1.1 contains a patch for the bug.</p> <p>TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the `&lt;tabber&gt;` tag. Version 3.1.1 contains a patch for the bug.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53093 https://cve.radiocsirt.org/vuln/ghsa-jfj7-249r-7j2m <p><strong>Affected:</strong> Packagist: starcitizentools/tabber-neue</p> <p>### Summary Arbitrary HTML can be inserted into the DOM by inserting a payload into any allowed attribute of the `&lt;tabber&gt;` tag.</p> <p>### Details</p> <p>The `args` provided within the wikitext as attributes to the `&lt;tabber&gt;` tag are passed to the TabberComponentTabs class: https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/Tabber.php#L76</p> <p>In TabberComponentTabs, the attributes are validated before being supplied to the Tabs template. https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/Components/TabberComponentTabs.php#L15-L31 However, the validation is insufficient. What `Sanitizer::validateTagAttributes` does is call `validateAttributes`, which ``` * - Discards attributes not on the given list * - Unsafe style attributes are discarded * - Invalid id attributes are re-encoded ``` However, the attribute values are expected to be escaped when inserted into HTML.</p> <p>The attribute values are then inserted into HTML without being escaped: https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/templates/Tabs.mustache#L1</p> <p>### PoC #### XSS through attributes: 1. Go to Special:ExpandTemplates and insert the following wikitext: ``` &lt;tabber class=&#39;test123&#34; onmouseenter=&#34;alert(1)&#34;&#39;&gt; |-|First Tab Title= First tab content goes here. &lt;/tabber&gt; ``` 2. Press &#34;OK&#34; 3. Hover over the tabber…</p> <p><strong>Affected:</strong> Packagist: starcitizentools/tabber-neue</p> <p>### Summary Arbitrary HTML can be inserted into the DOM by inserting a payload into any allowed attribute of the `&lt;tabber&gt;` tag.</p> <p>### Details</p> <p>The `args` provided within the wikitext as attributes to the `&lt;tabber&gt;` tag are passed to the TabberComponentTabs class: https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/Tabber.php#L76</p> <p>In TabberComponentTabs, the attributes are validated before being supplied to the Tabs template. https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/Components/TabberComponentTabs.php#L15-L31 However, the validation is insufficient. What `Sanitizer::validateTagAttributes` does is call `validateAttributes`, which ``` * - Discards attributes not on the given list * - Unsafe style attributes are discarded * - Invalid id attributes are re-encoded ``` However, the attribute values are expected to be escaped when inserted into HTML.</p> <p>The attribute values are then inserted into HTML without being escaped: https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/templates/Tabs.mustache#L1</p> <p>### PoC #### XSS through attributes: 1. Go to Special:ExpandTemplates and insert the following wikitext: ``` &lt;tabber class=&#39;test123&#34; onmouseenter=&#34;alert(1)&#34;&#39;&gt; |-|First Tab Title= First tab content goes here. &lt;/tabber&gt; ``` 2. Press &#34;OK&#34; 3. Hover over the tabber…</p> https://cve.radiocsirt.org/vuln/ghsa-jfj7-249r-7j2m https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1525 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um SQL-Injection- und XSS-Angriffe durchzuführen, Sicherheitsmechanismen zu umgehen, vertrauliche Informationen offenzulegen oder sich unbefugt höhere Berechtigungen zu verschaffen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um SQL-Injection- und XSS-Angriffe durchzuführen, Sicherheitsmechanismen zu umgehen, vertrauliche Informationen offenzulegen oder sich unbefugt höhere Berechtigungen zu verschaffen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1525