← Database

CVE-2021-42042

MEDIUM CVSS: 4.8 Published: 2021-10-06 Modified: 2026-06-17

Description

An issue was discovered in SpecialEditGrowthConfig in the GrowthExperiments extension in MediaWiki through 1.36.2. The growthexperiments-edit-config-error-invalid-title MediaWiki message was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript.

Affected Platforms

Mediawiki Mediawiki

Weakness Type

CWE-79

References