Bombobombone

**Name of the Vulnerable Software and Affected Versions** Mediawiki - Cargo extension versions prior to 3.9.5 **Description** Improper neutralization of input during web page generation in the Mediawiki - Cargo extension allows Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and executed in the browser of users who view the affected page. **Recommendations** Update Mediawiki - Cargo extension to version 3.9.5 or later.

**Name of the Vulnerable Software and Affected Versions** Mediawiki - CirrusSearch extension versions prior to 1.46.1 **Description** Improper neutralization of input during web page generation leads to a Reflected Cross-Site Scripting (XSS) issue. This occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing an attacker to execute malicious scripts in the victim's browser. **Recommendations** Update Mediawiki - CirrusSearch extension to version 1.46.1 or later.

**Name of the Vulnerable Software and Affected Versions** Mediawiki - WikiLambda Extension versions prior to 1.47.0 **Description** Improper handling of insufficient permissions or privileges allows accessing functionality not properly constrained by Access Control Lists (ACLs), which are sets of rules that define which users or system processes are granted access to objects. This issue affects systems running on Linux, MacOS, and Windows. **Recommendations** Update Mediawiki - WikiLambda Extension to version 1.47.0 or later.