← Database

CVE-2021-42046

MEDIUM CVSS: 6.1 Published: 2022-09-29 Modified: 2026-06-17

Description

An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly escaped and allowed for users to inject HTML and JavaScript.

Affected Platforms

Mediawiki Mediawiki

Weakness Type

CWE-79

References