Threats tagged 'ghsa-wm9g-fv6p-hww9'

A stored cross-site scripting (XSS) vulnerability exists in the Mediawiki CentralAuth extension maintained by The Wikimedia Foundation. This vulnerability is caused by improper neutralization of input during web page generation, which allows malicious scripts to be stored and executed in users' browsers. It affects versions prior to 1.46.1, 1.45.5, and 1.43.10 of the CentralAuth extension. No CVSS score is provided, but the impact is considered high due to the nature of stored XSS vulnerabilities.