Threats tagged 'ghsa-9j6w-3g83-7xg8'

A stored cross-site scripting (XSS) vulnerability exists in the Mediawiki MassMessage extension prior to versions 1.43.10, 1.45.5, and 1.46.1. This vulnerability is caused by improper neutralization of input during web page generation, which could allow an attacker to inject malicious scripts. The vulnerability has a medium severity rating with a CVSS score of 6.1.