Description
In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users.
Remediation
References
Related Vulnerabilities
Contao Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-45398)
WordPress Plugin Publish to Schedule Cross-Site Scripting (4.5.4)
WordPress Plugin Wonder PDF Embed Cross-Site Scripting (1.6)
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7929)
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (2.2.7)