Unscored CVE-2023-37256 EUVD-2023-41176GHSA-655h-vxcr-6q9j

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and aut…

Published Jun 29, 2023 · Updated Nov 26, 2024 · Assigned by mitre

Description

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically links these URLs.

Advisories 1

WID-SEC-2023-1695 MediaWiki: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 13, 2026

References

https://phabricator.wikimedia.org/T331311