medium6.5
CVE-2023-45359
An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1.
Impact
An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-toggle-button-label is not escaped, but should be, because the line param can have markup.
Affected products
| Product | Affected versions |
|---|---|
| Vector Skin Component For MediaWiki | before 1.39.5 |
| 1.40.X | before 1.40.1. |
Versions were read from the advisory text. No structured product data has been published for this record yet.