CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects Java.
CVE
CVE-2021-42042
Severity
MEDIUM
CVSS
4.8
EPSS
0.55%
Java
Original NVD Description
An issue was discovered in SpecialEditGrowthConfig in the GrowthExperiments extension in MediaWiki through 1.36.2. The growthexperiments-edit-config-error-invalid-title MediaWiki message was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript.
Related CVEs
Other vulnerabilities affecting the same vendor(s)