CVE-2021-42045: Mediawiki

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing their User-Agent HTTP header and submitting a vote.

Affected products

  • Mediawiki Mediawiki: up to and including 1.36.2

Published 2022-09-29. Last modified 2026-06-17.