Make rawHTML mode not apply to system messages
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.5%
exploitation probability
1.5%top 28% of all CVEs
observed exploitation
nono source reports it
Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages.
Affected products
mediawiki · mediawiki