Wikimedia: >> Parsoid >> 0.4.1 Security Vulnerabilities
An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2021-04-09