CVE-2024-47815 Cross-site Scripting in IncidentReporting

IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...

CVE-2024-47815: Improper Neutralization of Input During Web Page Generation

IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...

PT-2024-32826

Name of the Vulnerable Software and Affected Versions IncidentReporting versions prior to the version containing commit 43896a4 Description The IncidentReporting MediaWiki extension has multiple Cross-site Scripting issues that require elevated permissions to exploit. These issues affect users wi...