medium6.1
CVE-2023-37254
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3.
Impact
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item when using the default format.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.39.3 |