Threats tagged 'ghsa-wgjv-5xcv-4jq5'

A stored cross-site scripting (XSS) vulnerability exists in the Wikimedia Foundation MediaWiki WikiLambda extension prior to version 1.46.1. This vulnerability is due to improper neutralization of input during web page generation, which allows malicious scripts to be stored and executed in users' browsers. The issue is classified as high severity. No CVSS score is provided. No known exploits in the wild have been reported. The vulnerability affects versions before 1.46.1.