6 matches found
CVE-2024-23176
A flaw was found in the MassMessage extension of MediaWiki. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into web pages viewed by other users. The flaw occurs when a specially crafted URL, specifically Special:MassMessage?uselang=x-xs...
CVE-2024-23176
An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS...
PT-2026-91064
Name of the Vulnerable Software and Affected Versions MassMessage extension in MediaWiki versions prior to 1.40.2 Description A Cross-Site Scripting XSS issue exists in the MassMessage extension. The problem occurs when using the Special:MassMessage endpoint with the uselang parameter set to a...
CVE-2024-23176
CVE-2024-23176 is a cross-site scripting (XSS) vulnerability in the MassMessage extension of MediaWiki versions before 1.40.2 . The root cause is that the i18n key massmessage-form-page-help fails to sanitize user-supplied input passed via the uselang parameter in a Special:MassMessage URL (e.g.,...
