CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java.
CVE
CVE-2021-42043
Severity
MEDIUM
CVSS
6.1
EPSS
0.75%
Java
Original NVD Description
An issue was discovered in Special:MediaSearch in the MediaSearch extension in MediaWiki through 1.36.2. The suggestion text (a parameter to mediasearch-did-you-mean) was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript via the intitle: search operator within the query.
Related CVEs
Other vulnerabilities affecting the same vendor(s)