Medium · 4.8 CVE-2024-40604 EUVD-2024-38540GHSA-7pmp-55wr-jh62

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu …

Published Jul 6, 2024 · Updated Mar 18, 2025 · Assigned by mitre

Description

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries.

Advisories 1

WID-SEC-2024-1540 MediaWiki: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2024

References

https://phabricator.wikimedia.org/T361450