Threats tagged 'ghsa-pvqw-26jw-x4g6'

A stored cross-site scripting (XSS) vulnerability exists in the CentralNotice extension of The Wikimedia Foundation's Mediawiki. This vulnerability arises from improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in users' browsers. It affects multiple versions of the Mediawiki CentralNotice extension prior to versions 1.46.1, 1.45.5, and 1.43.10. The vulnerability has a medium severity rating with a CVSS score of 6.1.