Description
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page.
Remediation
References
Related Vulnerabilities
WordPress Plugin Job Manager Cross-Site Scripting (0.7.24)
PrestaShop Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-21302)
WordPress Plugin Comments Like Dislike Security Bypass (1.1.3)
WordPress Plugin SKU Shortlink For WooCommerce Arbitrary File Disclosure (1.3.4)
Oracle Database Server CVE-2011-0805 Vulnerability (CVE-2011-0805)