Description
The FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user actions to a specific user's IP address. Instead, for various actions, it would report the IP address of an internal Wikimedia Foundation server by omitting X-Forwarded-For data. This resulted in an inability to properly audit and attribute various user actions performed via the FileImporter extension.
Remediation
References
Related Vulnerabilities
WordPress Plugin Eventify-Simple Events 'fetcheventdetails.php' SQL Injection (1.7.f)
WordPress Plugin Style It Cross-Site Scripting (1.0)
mod_ssl Other Vulnerability (CVE-2002-0082)
WordPress Plugin Twitter Feed:Embedded Timeline 'url' Parameter Cross-Site Scripting (0.3.1)
Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2020-8164)