Description
An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter.
Remediation
References
Related Vulnerabilities
Liferay DXP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2024-25606)
ownCloud Cryptographic Issues Vulnerability (CVE-2013-1941)
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-28375)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-1280)
WordPress Plugin Very Simple Quiz Cross-Site Scripting (1.0.0)