CVE:CVE-2020-35478
CNNVD:CNNVD-202012-1388
MediaWiki是美国MediaWiki（维基媒体）基金会的一套自由免费的基于网络的Wiki引擎。该产品可用于部署内部的知识管理和内容管理系统。
MediaWiki before 1.35.1 版本存在跨站脚本漏洞，该漏洞允许通过BlockLogFormatter.php XSS。MediaWiki:blanknamespace可能可以通过LogFormatter::makePageLink()输出为带有脚本标记的原始HTML。
solution:Upgrade mediawiki mediawiki to a higher version than 1.35.1,and avoid the version [1.33.0,1.35.1); Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33
solution:Upgrade netgear jgs516pe_firmware to a higher version than 2.6.0.48,and avoid the version (,2.6.0.48); Upgrade netgear jgs524e_firmware to a higher version than 2.6.0.48,and avoid the version (,2.6.0.48); Upgrade netgear jgs524pe_firmware to a higher version than 2.6.0.48,and avoid the version (,2.6.0.48); Upgrade netgear gs116e_firmware to a higher version than 2.6.0.48,and avoid the version (,2.6.0.48)