CVE-2021-41798

PoC —

CVSS 3.1

6.1 medium

EPSS

1%p70

Published

Oct 11, 2021 (Oct 11, 2021)

Modified

Jun 17, 2026

Description

MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.

Vendors: mediawiki fedoraproject
Products: mediawiki, fedora
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.