Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-11-17	CVE-2022-42985	Cross-site Scripting vulnerability in Scratch-Wiki Scratch Login The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting (XSS). network low complexity scratch-wiki CWE-79	4.8
2022-02-15	CVE-2021-46252	Cross-Site Request Forgery (CSRF) vulnerability in Scratch-Wiki Scratch Confirmaccount V3 A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attackers to modify account request requirement bypasses. network low complexity scratch-wiki CWE-352	6.5