CVE-2021-42048

CVE-2021-42048 concerns the Growth extension in MediaWiki up to 1.36.2, where any admin can inject arbitrary JavaScript into the Newcomer home page footer, which is then executed by viewers with zero edits. The issue is triggered by admin-written JS on the footer, enabling code execution in end-u...