CVE-2020-6163: Mediawiki

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).

Affected products

• Mediawiki Mediawiki: version 1.35 only

Published 2020-01-08. Last modified 2026-06-17.