Search for packages
Package details: pkg:composer/mediawiki/core@1.21.9
purl pkg:composer/mediawiki/core@1.21.9
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-cnvt-n6bc-3khx Cross-site scripting vulnerability in includes/actions/InfoAction.php Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action. CVE-2014-2853
GHSA-6h86-9r5g-f2h5

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T12:26:52.564057+00:00 GithubOSV Importer Fixing VCID-cnvt-n6bc-3khx https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-6h86-9r5g-f2h5/GHSA-6h86-9r5g-f2h5.json 36.1.3