MediaWiki Cross-Site Scripting Vulnerability (CNVD-2022-68884)

MediaWiki is a set of web-based wiki engines from the U.S. Wikimedia (MediaWiki) Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.37.2 and prior versions, which stems from a cross-site scripting vulnerability in the Advertise link in Nimbus skin. An attacker could exploit this vulnerability to conduct cross-site scripting attacks.