GHSA-jqvm-9xm2-gc38MediumCVSS 6.1

Mediawiki Cargo extension vulnerable to Cross-site Scripting

Published
October 5, 2024
Last Modified
October 7, 2024

🔗 CVE IDs covered (1)

CVE-2024-47847 →

📋 Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.

🎯 Affected products1

  • composer/mediawiki/cargo:< 3.6.1

🔗 References (8)