PT-2024-2679

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.40.2 WatchAnalytics extension in MediaWiki affected versions not specified Description An issue in the WatchAnalytics extension allows for XSS to occur via the Special:PageStatistics page parameter. This can enabl...

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

MediaWiki 安全漏洞

MediaWiki is an open source Wiki system based on PHP+MySQL environment. MediaWiki cross-site scripting attack vulnerability , the reason for this vulnerability is because the WatchAnalytics extension has a vulnerability , an attacker can use this vulnerability through the Special:PageStatistics...

CVE-2024-23177

CVE-2024-23177 affects the WatchAnalytics extension in MediaWiki prior to 1.40.2 . The issue allows XSS via the Special:PageStatistics page parameter due to improper input handling in the extension. Impact is cross-site scripting (arbitrary JavaScript execution) in affected contexts. The CVSS bas...

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...