The vulnerability of the mw.message.parse() function in the software framework for implementing the MediaWiki hypertext environment allows a attacker to perform XSS attacks.

The vulnerability of the mw.message.parse function in the MediaWiki software environment exists because measures to protect the structure of web pages have not been taken. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...