Threats tagged 'ghsa-mwqr-9fvj-9cvq'

A stored cross-site scripting (XSS) vulnerability exists in the Mediawiki Cargo extension up to version 3.9.4 due to improper neutralization of input during web page generation. This vulnerability allows malicious input to be stored and later executed in users' browsers. The issue is identified as CWE-79. No official patch or fix information is provided in the available data.