-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello everyone,
This is an announcement of a security release for
the TemplateData extension.
Version 0.1.1 and earlier of this extension
is vulnerable to a stored XSS vulnerability.
Please upgrade your wikis to version 0.1.2 of
this extension. The fix is included in git
commit f6c8566aa3 (for master), 3817a3dbb
(for REL1_30), bcd2508da (for REL1_29) and
eeaba019 (for REL1_27).
For information about the extension and where
to download, see its description page:
https://www.mediawiki.org/wiki/Extension:TemplateData
For more information about the flaw, see the ticket:
https://phabricator.wikimedia.org/T118682
Thank you,
Brian Wolff
Wikimedia Security Team
-----BEGIN PGP SIGNATURE-----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=PKzo
-----END PGP SIGNATURE-----