Daimona

Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and later executed in the browser of a user visiting the affected page.

Name of the Vulnerable Software and Affected Versions Mediawiki - CampaignEvents Extension versions 1.43.7, 1.44.4, and 1.45.2 Description The Wikimedia Foundation Mediawiki - CampaignEvents Extension is susceptible to a cross-site scripting (XSS) issue due to improper input neutralization during web page generation. This allows for the injection of malicious scripts into web pages viewed by other users. Recommendations Update to a newer version of the Mediawiki - CampaignEvents Extension that addresses this issue. As a temporary workaround, carefully sanitize all user-supplied input before rendering it in web pages.

A missing authorization flaw exists in the Wikimedia Foundation MediaWiki - CampaignEvents extension, potentially allowing privilege abuse. The issue relates to the CampaignEvents API, where missing authorization could expose meeting and chat URLs.

Name of the Vulnerable Software and Affected Versions: Mediawiki - CampaignEvents Extension versions 1.43.X through 1.43.1 Description: The issue affects the Mediawiki - CampaignEvents Extension, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Recommendations: For Mediawiki - CampaignEvents Extension versions 1.43.X through 1.43.1, update to version 1.43.2 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.39.12 MediaWiki versions prior to 1.42.6 MediaWiki versions prior to 1.43.1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This affects program files, specifically includes/htmlform/fields/HTMLMultiSelectField.php. Recommendations: For versions prior to 1.39.12, update to version 1.39.12 or later. For versions prior to 1.42.6, update to version 1.42.6 or later. For versions prior to 1.43.1, update to version 1.43.1 or later.

The issue is related to the CampaignEvents extension in MediaWiki, which is associated with improper input neutralization during web page creation. This can allow a remote attacker to perform cross-site scripting attacks. The Special:EventDetails page is vulnerable to XSS via the x-xss language setting for internationalization.

The issue exists due to the lack of protection for the web page structure in the Phonos extension of MediaWiki. This allows a remote attacker to perform cross-site scripting attacks via the `phonos-purge-needed-error` message. The vulnerability is related to the `PhonosButton.js` file, which enables i18n-based XSS attacks.

The issue is related to a possibility of using XSS in the partial blocks feature of MediaWiki. This could allow a remote attacker to perform cross-site scripting attacks. The vulnerability is located in the BlockLogFormatter.php file within the BlockLogFormatter.

An issue was discovered where the contributions-title, used on Special:Contributions, is used as a page title without escaping. This can cause problems in non-default configurations where a username contains HTML entities, as it won't be escaped.

An issue in the AbuseFilter extension for MediaWiki improperly handled account blocks for certain automatically created MediaWiki user accounts. This allowed malicious users to remain unblocked.

An issue in the AbuseFilter extension for MediaWiki allows the disclosure of suppressed MediaWiki usernames to unprivileged users through the Special:AbuseFilter/examine form.

An issue was discovered in the AbuseFilter extension for MediaWiki, allowing a MediaWiki user who is partially blocked or was unsuccessfully blocked to bypass AbuseFilter and have their edits completed.

An issue was discovered in the GlobalUsage extension for MediaWiki. The `SpecialGlobalUsage.php` file calls `WikiMap::makeForeignLink` unsafely. The `$page` variable within the `formatItem` function was not being properly escaped, allowing for XSS under certain conditions.

The issue allows for XSS via a qbfind message supplied by an administrator in the CologneBlue skin. This can be exploited when an administrator supplies a malicious qbfind message.