Description
An issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups Action API module does not validate the parameter for aggregategroup when action=remove is set, thus allowing users with the translate-manage right to silently delete various groups' metadata.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Property Listings Cross-Site Request Forgery (3.3.5.8)
WordPress Plugin Lazy SEO Arbitrary File Upload (1.3.2)
Oracle Application Server Other Vulnerability (CVE-2005-3448)
PHP Improper Input Validation Vulnerability (CVE-2006-6383)
WordPress Plugin Crony Cronjob Manager Multiple Vulnerabilities (0.4.4)