Description
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).
Remediation
References
Related Vulnerabilities
MySQL CVE-2017-3464 Vulnerability (CVE-2017-3464)
WordPress Plugin Lazy Load Cross-Site Scripting (0.6)
Oracle JRE CVE-2019-2958 Vulnerability (CVE-2019-2958)
Apache Tomcat Credentials Management Errors Vulnerability (CVE-2009-3548)
WordPress Plugin Seriously Simple Podcasting Cross-Site Request Forgery (2.16.0)