Threats tagged 'ghsa-gwp7-78vh-mpmm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.4	CVE-2024-34507includes/CommentFormatter/CommentParser.php · Basic XSS High7.42024-05-05GCVE DatabaseCVE-2024-34507 A cross-site scripting (XSS) vulnerability exists in MediaWiki versions before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1 due to improper handling of the 0x1b character in the CommentParser.php component. This flaw can be triggered via the Special:RecentChanges page, potentially allowing an attacker to execute script code in the context of the affected site. Report on CVE-2024-34507 Vulnerability CWE-80 #ghsa-gwp7-78vh-mpmm	GCVE Database	2024-05-05

Page 1 of 1