CVE-2020-6163

The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).

• CWE-79

• https://gerrit.wikimedia.org/r/558203Third Party Advisory
• https://phabricator.wikimedia.org/T240773Patch, Third Party Advisory
• https://gerrit.wikimedia.org/r/558203Third Party Advisory
• https://phabricator.wikimedia.org/T240773Patch, Third Party Advisory

Published

Jan 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6155A heap overflow vulnerability exists in the Pixar OpenUSD 20…7.8
• CVE-2020-6156A heap overflow vulnerability exists in Pixar OpenUSD 20.05 …7.8
• CVE-2020-6157Opera Touch for iOS before version 2.4.5 is vulnerable to an…4.3
• CVE-2020-6158Opera Mini for Android before version 52.2 is vulnerable to …4.7
• CVE-2020-6159URLs using “javascript:” have the protocol removed when past…6.1
• CVE-2020-6162An issue was discovered in Bftpd 5.3. Under certain circumst…9.1
• CVE-2020-6164In SilverStripe through 4.5.0, a specific URL path configure…7.5
• CVE-2020-6165SilverStripe 4.5.0 allows attackers to read certain records …5.3
• CVE-2020-6166A flaw in the WordPress plugin, Minimal Coming Soon & Mainte…5.4
• CVE-2020-6167A flaw in the WordPress plugin, Minimal Coming Soon & Mainte…8.8
• CVE-2020-6168A flaw in the WordPress plugin, Minimal Coming Soon & Mainte…7.6
• CVE-2020-6170An authentication bypass vulnerability on Genexis Platinum-4…9.8