Vendor/product archive

wikimedia / wikidata_query_gui CVEs

Beta · best-effort

3 CVEs tagged to wikimedia / wikidata_query_gui — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to wikimedia vendor archive

CVE-2019-19329

Published Nov 27, 2019

In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur,…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-19328

Published Nov 27, 2019

ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entities. NOTE: this GUI code is no longer b…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-19327

Published Nov 27, 2019

ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of results and number of milliseconds. NOT…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1