https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T23:55:19.137497+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2021-09326 cnvd-2021-09326 2026-10-08T23:55:19.144514+00:00 cnvd-2021-09326 https://vulnerability.circl.lu/vuln/fkie_cve-2020-35625 fkie_cve-2020-35625 2026-10-08T23:55:19.144596+00:00

An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment.

 https://vulnerability.circl.lu/vuln/ghsa-9w6x-xx84-rm4g GHSA-9w6x-xx84-rm4g 2026-10-08T23:55:19.144657+00:00

An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment.

 https://vulnerability.circl.lu/vuln/gsd-2020-35625 gsd-2020-35625 2026-10-08T23:55:19.144690+00:00 gsd-2020-35625