https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T11:11:05.988384+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-36130 CVE-2021-36130 2026-10-07T11:11:05.991426+00:00

An XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36. Within several gift-related special pages, a privileged user with the awardmanage right could inject arbitrary HTML and JavaScript within various gift-related data fields. The attack could easily propagate across many pages for many users.