Description

An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.

Remediation

References

CVE-2023-45360

Related Vulnerabilities

WordPress Plugin Easy Banners Cross-Site Scripting (1.4)

WordPress Plugin Campaign URL Builder Cross-Site Scripting (1.8.1)

jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-9251)

WordPress Improper Input Validation Vulnerability (CVE-2020-28037)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4306)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2023-45360