Skin\

skin\

Vendor: Mediawiki • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-27620

1Mediawiki

1Skin\

Jun 17, 2026

Oct 22, 2020

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wfMessage and Html::rawElement, as demonstrated by CosmosSocialProfile::getUserGr...Show more