Vulnerabilities > Mediawiki > Visual Editor

DATE CVE VULNERABILITY TITLE RISK
2019-12-11 CVE-2019-19708 Cross-site Scripting vulnerability in Mediawiki Visual Editor 1.34
The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.
network
low complexity
mediawiki CWE-79
6.1