Threats tagged 'ghsa-wp5j-232x-fmpv'

A reflected cross-site scripting (XSS) vulnerability exists in the Wikimedia Foundation's Mediawiki Cargo extension before version 1.46.1. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts into web pages. No CVSS score is provided for this vulnerability. The issue is classified as high severity due to the potential impact of XSS attacks. A fix is available in version 1.46.1.