Description
An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MediaWiki | MassMessage | < 1.40.2 | 1.40.2 |
Advisories 1
- WID-SEC-2024-0083 MediaWiki: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 13, 2026