ROS-20240409-11

Vulnerability in the WatchAnalytics extension of the hypertext environment implementation software tool
MediaWiki is related to XSS exploitation using the Special:PageStatistics page parameter. Exploitation
The exploitation of the vulnerability could allow a remote attacker to perform cross-site scripting attacks.

Vulnerability in the Phonos extension of the MediaWiki hypertext implementation software tool
is related to the exploitation of i18n-based XSS via the phonos-purge-needed-error message.
Exploitation of the vulnerability could allow an attacker acting remotely to perform cross-site
scripting attacks

Vulnerability in the Cargo extension of the MediaWiki hypertext implementation software tool
is related to XSS exploitation via artist, album and position parameters due to applied values of the
filter in detail/CargoAppliedFilter.php. Exploitation of the vulnerability could allow an attacker,
acting remotely, to perform cross-site scripting attacks

Vulnerability in the CheckUser extension of the MediaWiki hypertext implementation tool
is related to XSS exploitation via message definitions. e.g. in SpecialCheckUserLog. Exploitation of the
vulnerability could allow an attacker acting remotely to perform cross-site scripting attacks

A vulnerability in the PageTriage extension of the MediaWiki hypertext implementation software tool
is related to improper input neutralization during web page creation. Exploitation of the vulnerability
could allow an attacker acting remotely to perform cross-site scripting attacks.

Vulnerability in the CampaignEvents extension of the hypertext environment implementation software tool
MediaWiki is related to improper input neutralization during web page creation. Exploitation
exploitation of the vulnerability could allow a remote attacker to perform cross-site scripting attacks.

Vulnerability in the GlobalBlocking extension of the hypertext environment implementation software tool
MediaWiki is related to incorrect input neutralization during web page creation.
Exploitation of the vulnerability could allow an attacker acting remotely to perform cross-site scripting attacks.
scripting attacks