MediaWiki Cross-Site Scripting Vulnerability (CNVD-2022-68822)

MediaWiki is a web-based wiki engine from the MediaWiki Foundation in the United States. The product can be used to deploy internal knowledge management and content management systems.A cross-site scripting vulnerability exists in versions of MediaWiki prior to 2022-04-29, which stems from an RSS extension allowing cross-site scripting attacks via the rss element. An attacker could use this vulnerability to execute JavaScript code on the client side.