CVE-2024-47840

Name of the Vulnerable Software and Affected Versions Mediawiki - Apex skin versions 1.39.X through 1.39.8 Mediawiki - Apex skin versions 1.41.X through 1.41.2 Mediawiki - Apex skin versions 1.42.X through 1.42.1

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS, where an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.

Recommendations For Mediawiki - Apex skin versions 1.39.X through 1.39.8, update to version 1.39.9 or later. For Mediawiki - Apex skin versions 1.41.X through 1.41.2, update to version 1.41.3 or later. For Mediawiki - Apex skin versions 1.42.X through 1.42.1, update to version 1.42.2 or later.