medium6.1
CVE-2023-37256
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3.
Impact
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically links these URLs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.39.3 |