CVE-2023-37254: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item when using the default format...