{"action":"Upgrade mediawiki to 1:1.31.7-1 or later.","affected":[{"fixed":"1:1.31.7-1","introduced":"0"}],"component":"mediawiki","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1:1.31.7-1"],"id":"tcs_01M5NEFQGJ0NDQACJBZ1AG4BDF","modified_at":"2026-10-26T12:00:17.955655920Z","published_at":"2020-04-03T15:15:14.497Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-10960","https://security-tracker.debian.org/tracker/CVE-2020-10960"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-10960#Debian:13/mediawiki","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-10960"}],"summary":"In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is shown or hidden in the user interface) to arbitrary DOM nodes via HTML content"}