Description
An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via the phonos-purge-needed-error message.
Remediation
References
Related Vulnerabilities
WordPress Plugin Form for WordPress-Zoho Forms Cross-Site Scripting (3.0)
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.13)
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7984)
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.18)
WordPress Plugin LifterLMS-WP LMS for eLearning, Online Courses, & Quizzes Security Bypass (3.34.5)