https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 02:43:56 +0000 https://cve.radiocsirt.org/vuln/cve-2021-39186 <p><strong>Affected:</strong> miraheze GlobalNewFiles</p> <p>GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column of the GlobalNewFiles special page is vulnerable to a stored XSS. Commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d contains a patch. As a workaround, one may disallow &lt;,&gt; (or other characters required to insert html/js) from being used in account names so an XSS is not possible.</p> <p><strong>Affected:</strong> miraheze GlobalNewFiles</p> <p>GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column of the GlobalNewFiles special page is vulnerable to a stored XSS. Commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d contains a patch. As a workaround, one may disallow &lt;,&gt; (or other characters required to insert html/js) from being used in account names so an XSS is not possible.</p> https://cve.radiocsirt.org/vuln/cve-2021-39186