Description
An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or Special:RevisionDelete.
Remediation
References
Related Vulnerabilities
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (7.8.9)
WordPress Plugin ReFlex Gallery Cross-Site Scripting (3.1.4)
MySQL CVE-2021-2038 Vulnerability (CVE-2021-2038)
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.20)
WordPress Plugin Super Logos Showcase for WordPress Arbitrary File Upload (2.2)