Unscored CVE-2023-45373 EUVD-2023-49665GHSA-r83w-7pr5-mfp7

An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before…

Published Oct 9, 2023 · Updated Sep 19, 2024 · Assigned by mitre

Description

An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. XSS can occur via formatNumNoSeparators.

Advisories 1

WID-SEC-2023-2594 MediaWiki: Mehre Schwachstellen BSI CERT-Bund (WID) · Nov 28, 2023

References

https://phabricator.wikimedia.org/T345693
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ProofreadPage/+/961262