{"id":"CVE-2020-6163","details":"The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).","aliases":["BIT-mediawiki-2020-6163"],"modified":"2026-07-08T20:43:22.592368Z","published":"2020-01-08T02:15:10.553Z","references":[{"type":"ADVISORY","url":"https://gerrit.wikimedia.org/r/558203"},{"type":"FIX","url":"https://phabricator.wikimedia.org/T240773"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/wikimedia/mediawiki","events":[{"introduced":"2303b05125b2cc046a20d614786174ea803143eb"},{"last_affected":"2303b05125b2cc046a20d614786174ea803143eb"}],"database_specific":{"cpe":"cpe:2.3:a:mediawiki:mediawiki:1.35:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.35"},{"last_affected":"1.35"}],"source":"CPE_STRING"}}],"versions":["1.35","fundraising/REL1_35"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6163.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}