Somerandomdeveloper

Improper neutralization of script-related HTML tags in a web page allows for Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and served to other users.

Improper neutralization of input during web page generation leads to a Stored Cross-Site Scripting (XSS) issue. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be permanently stored on the server.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1.

An open redirect issue exists in the Mediawiki - Collection extension, which allows an attacker to redirect users to an untrusted site and fake the source of data.

An XML injection issue, also known as blind XPath injection, exists in the Mediawiki - EasyTimeline extension. This allows an attacker to inject XML, which can be used to manipulate XPath queries to extract information from the XML document structure without the application returning the results directly in the response.

Improper neutralization of input during web page generation allows for Stored Cross-site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and served to other users.

Improper neutralization of input during web page generation leads to a Stored Cross-Site Scripting (XSS) issue. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be permanently stored on the server.

Improper neutralization of input during web page generation leads to a stored cross-site scripting (XSS) issue. Cross-site scripting is a flaw that allows an attacker to inject malicious scripts into content that is then served to other users.

Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and later executed in the browser of a user visiting the affected page.

An information exposure issue in the Mediawiki - WikiLambda Extension allows unauthorized actors to perform excavation, enabling the viewing of revision-deleted pages. This occurs through the `action=edit` endpoint and the `Special:ViewAbstract` page.

Improper neutralization of input during web page generation allows Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and later executed in the browser of a user visiting the affected page.

An OS Command Injection issue exists in the ExternalData extension, which allows unauthenticated remote code execution through wikitext. This occurs due to the improper neutralization of special elements used in an OS command.

Improper neutralization of input during web page generation allows for Cross-Site Scripting (XSS), a condition where malicious scripts are injected into trusted websites.

Cross-Site Request Forgery (CSRF) occurs in the RedirectManager Extension. CSRF is a flaw that allows an attacker to trick a victim into performing actions they did not intend to do on a web application.

Improper neutralization of input during web page generation leads to a Stored Cross-Site Scripting (XSS) issue. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be permanently stored on the server.

Improper neutralization of input terminators in the Mediawiki - WikiLambda Extension allows for authentication bypass, enabling blocked users to create and edit WikiLambda objects.

The Mediawiki - Score Extension contains a cross-site scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for the execution of malicious scripts within the context of a user's browser.

Name of the Vulnerable Software and Affected Versions MediaWiki - Cargo Extension versions prior to 3.8.7 Description A Stored Cross-Site Scripting (XSS) issue exists in the MediaWiki - Cargo Extension due to improper neutralization of script-related HTML tags. This allows for the injection of malicious scripts into web pages. Recommendations Update MediaWiki - Cargo Extension to version 3.8.7 or later.

Name of the Vulnerable Software and Affected Versions The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension (affected versions not specified) Description A cross-site scripting (XSS) issue exists in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension. This allows for XSS attacks. The issue affects non-release branches. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Mediawiki - Wikilove Extension versions 1.43.7, 1.44.4, and 1.45.2 Description The Mediawiki - Wikilove Extension contains a flaw due to improper neutralization of alternate XSS syntax, which can lead to Cross-Site Scripting (XSS). Recommendations Update Mediawiki - Wikilove Extension to a version later than 1.45.2.