Medium · 4.8 CVE-2024-40599 EUVD-2024-38535GHSA-q6vq-qp5q-w6g2

An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.

Published Jul 6, 2024 · Updated Mar 20, 2025 · Assigned by mitre

Description

An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.

Advisories 1

WID-SEC-2024-1540 MediaWiki: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2024

References

https://phabricator.wikimedia.org/T361448