MediaWiki XSS

The vulnerability of the mw.message.parse function in the MediaWiki software environment exists because measures to protect the structure of web pages have not been taken. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...