← Database

CVE-2022-28202

MEDIUM CVSS: 6.1 Published: 2022-03-30 Modified: 2026-06-17

Description

An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or Special:RevisionDelete.

Affected Platforms

Debian Debian LinuxMediawiki MediawikiFedoraproject Fedora

Weakness Type

CWE-79

References