Threats tagged 'ghsa-7j9q-53xp-5mqq'

A stored cross-site scripting (XSS) vulnerability exists in the Refreshed skin of The Wikimedia Foundation's Mediawiki software. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. It affects multiple versions of Mediawiki prior to 1.46.1, including several specific earlier versions. The vulnerability has a medium severity rating with a CVSS score of 6.1.