Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS.
This issue affects Mediawiki - Flow Extension: from * before 1.46.1, 1.45.5, 1.43.10.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wikimedia Foundation | Mediawiki - Flow Extension | < 1.46.1, 1.45.5, 1.43.10 | 1.46.1, 1.45.5, 1.43.10 |