This vulnerability, identified as CWE-79, allows for improper neutralization of input in the SyntaxHighlight_GeSHi extension used by Wikimedia Foundation projects. The issue resides in the includes/SyntaxHighlight.Php file and affects multiple versions before 1.46.0, including 1.45.4, 1.44.6, and 1.43.9. The CVSS 4.0 base score is 5.3, indicating a medium severity level. No vendor advisory or patch information is available at this time, and no known exploits are reported in the wild.

Successful exploitation could allow an attacker with low privileges to inject malicious scripts into web pages generated by the vulnerable SyntaxHighlight_GeSHi component. This could lead to limited impact due to the low attack complexity and no user interaction required, but the vulnerability has low scope and no additional privileges or integrity impacts according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor official Wikimedia Foundation channels for updates. No temporary or official fixes are currently documented.