CVE-2024-47845: Improper Encoding or Escaping of Output

Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2...

PT-2024-32846 · Wikimedia Foundation · Mediawiki - Css Extension

Name of the Vulnerable Software and Affected Versions: Mediawiki - CSS Extension versions 1.39.X through 1.39.8 Mediawiki - CSS Extension versions 1.41.X through 1.41.2 Mediawiki - CSS Extension versions 1.42.X through 1.42.1 Description: The issue is related to a Path Traversal vulnerability,...

PT-2024-32847

Name of the Vulnerable Software and Affected Versions Mediawiki - CSS Extension versions 1.39.X through 1.39.8 Mediawiki - CSS Extension versions 1.41.X through 1.41.2 Mediawiki - CSS Extension versions 1.42.X through 1.42.1 Description The issue is related to improper encoding or escaping of...