Andmcadams

**Name of the Vulnerable Software and Affected Versions** Mediawiki - Cargo Extension versions prior to 1.43.9 Mediawiki - Cargo Extension versions prior to 1.44.6 Mediawiki - Cargo Extension versions prior to 1.45.4 **Description** Improper neutralization of special elements used in an SQL command allows for SQL injection. This issue occurs via the year range filter. **Recommendations** Update to version 1.43.9 or later. Update to version 1.44.6 or later. Update to version 1.45.4 or later.