Widgets Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Widgets Project records in CISA KEV

No Widgets Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Widgets 2 records LOW

Records

2 records

TI-2020-07502 CVE-2020-9382 · GHSA-2vw7-qgh3-r4pc

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki.

LOW 26

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00971 Published 2020-02-24 No fix listed CWE-74

TI-2015-05654 CVE-2015-6737 · GHSA-2v58-7mwh-3r84

Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows…

LOW 24

Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors involving base64 encoded content.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02009 Published 2015-09-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0