CVE-2021-30458Media · CVSS 6.1EPSS 0,98%Corrección disponibleCVE-2021-30458An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.wikimedia/parsoid wikimedia/parsoidPHPActualiza a 0.11.1Actualiza a 0.12.2Publicación 9 de abril de 2021Actualización 3 de agosto de 2024Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗