Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/RclToOrFromWidget.Js. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Hotel Booking SQL Injection (2.1.0)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47221)
WordPress Plugin FCChat Widget 'path' Parameter Cross-Site Scripting (2.1.7)
Envoy Proxy Use After Free Vulnerability (CVE-2025-62504)
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)