The vulnerability of the WatchAnalytics extension of the software platform, which enables the implementation of a hypertext environment like MediaWiki, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the WatchAnalytics extension for implementing the MediaWiki hypertext environment exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks using the...

Design/Logic Flaw

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...