Wikimedia Wikidata Query Service GUI 0.3.6
Approved changes feed: RSS · Atom
cpe:2.3:a:wikimedia:wikidata_query_gui:0.3.6:-:*:*:*:*:*:*
part: a version: 0.3.6 update: -
| Vendor | Wikimedia (15e2dd53-d178-575c-9871-f6b2d83e2814) |
|---|---|
| Product | Wikidata Query Gui (f593eff0-aada-5a7b-ab0d-e35eabbc1bfc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wikimedia/wikidata-query-gui |
purl2cpe | 2026-06-01 10:12:41.967240 |
pkg:npm/wikidata-query-gui |
purl2cpe | 2026-06-01 10:12:41.967243 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-19329 |
vulnerable | 2026-06-03 14:40:04.477863 |
Details available
In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
Published: 2019-11-27T15:28:10.000Z
Updated: 2024-08-05T02:16:46.919Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19328 |
vulnerable | 2026-06-03 14:40:04.477456 |
Details available
ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entities. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
Published: 2019-11-27T15:28:25.000Z
Updated: 2024-08-05T02:16:46.971Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19327 |
vulnerable | 2026-06-03 14:40:04.476441 |
Details available
ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of results and number of milliseconds. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
Published: 2019-11-27T15:28:38.000Z
Updated: 2024-08-05T02:16:46.918Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.