CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects Java.
CVE
CVE-2021-36130
Severity
MEDIUM
CVSS
4.8
EPSS
0.55%
Java
Original NVD Description
An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36. Within several gift-related special pages, a privileged user with the awardmanage right could inject arbitrary HTML and JavaScript within various gift-related data fields. The attack could easily propagate across many pages for many users.
Related CVEs
Other vulnerabilities affecting the same vendor(s)