Description
Cross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1.19.x before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to inject arbitrary web script or HTML via the "to" parameter to index.php.
Remediation
References
Related Vulnerabilities
Jboss EAP Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2021-3642)
WordPress 6.4.x Remote Code Execution (6.4 - 6.4.1)
WordPress Plugin Captcha by BestWebSoft Cross-Site Scripting (4.2.9)
Joomla URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-23754)