https://vulnerability.circl.lu/sightings/feed 2026-06-23T12:30:04.954708+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/475d3177-676b-4cda-91c6-556a95ccd49e/export 2026-06-23T12:30:04.971110+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "475d3177-676b-4cda-91c6-556a95ccd49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35475", "type": "seen", "source": "https://t.me/cibsecurity/21065", "content": "\u203c CVE-2020-35475 \u203c\n\nIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. (The right column with the changeable groups is not affected and is escaped correctly.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-18T12:47:03.000000Z"} 2020-12-18T12:47:03+00:00