Known Vulnerabilities for products from Scratch-wiki
Listed below are 4 of the newest known vulnerabilities associated with the vendor "Scratch-wiki".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-42985 json | The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with a... | 4.8 - MEDIUM | 2022-11-17 | 2022-11-17 |
| CVE-2021-46252 json | A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attackers ... | 6.5 - MEDIUM | 2022-02-15 | 2022-02-24 |
| CVE-2020-15179 json | The ScratchSig extension for MediaWiki before version 1.0.1 allows stored Cross-Site Scripting. Using |