An issue exists in the PageTriage extension in MediaWiki prior to 1.35.14, 1.36.x up to and including 1.39.x prior to 1.39.6, and 1.40.x prior to 1.40.2. XSS can occur via the rev-deleted-user, pagetriage-tags-quickfilter-label, pagetriage-triage, pagetriage-filter-date-range-format-placeholder, pagetriage-filter-date-range-to, pagetriage-filter-date-range-from, pagetriage-filter-date-range-heading, pagetriage-filter-set-button, or pagetriage-filter-reset-button message.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mediawiki mediawiki |
Vulmon