Change Details

Like T266400 but only for #PollNY this time around... Prerequisites: [[https://www.mediawiki.org/wiki/Social_tools|social tools]] setup (MW 1.34 with [[https://www.mediawiki.org/wiki/Extension:SocialProfile|SocialProfile]], and for this particular bug, also need [[https://www.mediawiki.org/wiki/Extension:PollNY|PollNY]]) # Create a poll via `Special:CreatePoll`, or edit an existing one via `Special:UpdatePoll` # Have an answer option contain something like `<script>alert('XSS')</script>` # Save changes # When viewing the poll's page in the `NS_POLL` namespace, the malicious code gets executed despite that it damn well shouldn't

Like T266400 but only for #PollNY this time around... Prerequisites: [[https://www.mediawiki.org/wiki/Social_tools|social tools]] setup (MW 1.34 with [[https://www.mediawiki.org/wiki/Extension:SocialProfile|SocialProfile]], and for this particular bug, also need [[https://www.mediawiki.org/wiki/Extension:PollNY|PollNY]]) # Create a poll via `Special:CreatePoll`, or edit an existing one via `Special:UpdatePoll` # Have an answer option contain something like `<script>alert('XSS')</script>` # Save changes # When viewing the poll's page in the `NS_POLL` namespace, the malicious code gets executed despite that it damn well shouldn't The last step is also true for polls embedded on other wiki pages via the `pollembed` parser tag.

Like T266400 but only for #PollNY this time around... Prerequisites: [[https://www.mediawiki.org/wiki/Social_tools|social tools]] setup (MW 1.34 with [[https://www.mediawiki.org/wiki/Extension:SocialProfile|SocialProfile]], and for this particular bug, also need [[https://www.mediawiki.org/wiki/Extension:PollNY|PollNY]]) # Create a poll via `Special:CreatePoll`, or edit an existing one via `Special:UpdatePoll` # Have an answer option contain something like `<script>alert('XSS')</script>` # Save changes # When viewing the poll's page in the `NS_POLL` namespace, the malicious code gets executed despite that it damn well shouldn't The last step is also true for polls embedded on other wiki pages via the `pollembed` parser tag.