Unscored CVE-2023-37254 EUVD-2023-41174GHSA-mrm7-9wh5-q689

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item wh…

Published Jun 29, 2023 · Updated Nov 27, 2024 · Assigned by mitre

Description

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item when using the default format.

Advisories 1

WID-SEC-2023-1695 MediaWiki: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 13, 2026

References

https://phabricator.wikimedia.org/T331065