Description
An issue was discovered in the Mentor dashboard in the GrowthExperiments extension in MediaWiki through 1.36.2. The Growthexperiments-mentor-dashboard-mentee-overview-add-filter-total-edits-headline, growthexperiments-mentor-dashboard-mentee-overview-add-filter-starred-headline, growthexperiments-mentor-dashboard-mentee-overview-info-text, growthexperiments-mentor-dashboard-mentee-overview-info-legend-headline, and growthexperiments-mentor-dashboard-mentee-overview-active-ago MediaWiki messages were not being properly sanitized and allowed for the injection and execution of HTML and JavaScript.
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-2896 Vulnerability (CVE-2020-2896)
Nginx Integer Overflow or Wraparound Vulnerability (CVE-2017-7529)
Apache Tomcat CVE-2022-29885 Vulnerability (CVE-2022-29885)
MediaWiki Credentials Management Errors Vulnerability (CVE-2015-8009)
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2019-10097)