CyberRota Analysis
AI analysis pending.
CVE
CVE-2020-35474
Severity
MEDIUM
CVSS
6.1
EPSS
1.04%
Original NVD Description
In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that the output is raw HTML.