Threats tagged 'ghsa-2rcm-h6cw-xrfr'

A stored Cross-site Scripting (XSS) vulnerability exists in the Wikimedia Foundation Mediawiki Wikibase Extension. It involves improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in users' browsers. This affects multiple versions of the Wikibase Extension prior to 1.46.1, 1.45.5, and 1.43.10. No CVSS score or official patch status is currently available, and no active exploitation has been reported.