WQ
Product
Wikidata Query Gui
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch
Add Wikidata Query Gui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-19329 | 6.1 | Nov 27 | In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur,… Affected: through 0.3.5; 0.3.6; 0.3.6 |
| CVE-2019-19328 | 6.1 | Nov 27 | ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entities Affected: through 0.3.5; 0.3.6; 0.3.6 |
| CVE-2019-19327 | 6.1 | Nov 27 | ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of results and number of milliseconds Affected: through 0.3.5; 0.3.6; 0.3.6 |
Showing 3
