title: Parameters injection in SyntaxHighlight results in multiple vulnerabilities
description: Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
problem types: parameter injection
affected:
{
product: mediawiki (SyntaxHighlight extension)
vendor: mediawiki
versions:
status: affected, version: n/a
}