CVE-2024-47612

DataDump is a MediaWiki extension that provides dumps of wikis. Several interface messages are unescaped more specifically, datadump-table-column-queued, datadump-table-column-in-progress, datadump-table-column-completed, datadump-table-column-failed. If these messages are edited which requires t...

PT-2024-32673

Name of the Vulnerable Software and Affected Versions DataDump versions prior to 601688ee8e8808a23b102fa305b178f27cbd226d Description The DataDump MediaWiki extension has a security issue due to unescaped interface messages, specifically datadump-table-column-queued,...

CVE-2024-47612: Improper Neutralization of Input During Web Page Generation

DataDump is a MediaWiki extension that provides dumps of wikis. Several interface messages are unescaped more specifically, datadump-table-column-queued, datadump-table-column-in-progress, datadump-table-column-completed, datadump-table-column-failed. If these messages are edited which requires t...

Design/Logic Flaw

WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. On Special:WikiDiscover, the Language::date function is used when making the human-readable timestamp for inclusion on the wikicreation column. This function uses interface messages to translate the nam...