PT-2022-26695 · Mediawiki · Scratchlogin Extension

Name of the Vulnerable Software and Affected Versions: ScratchLogin extension versions 1.1 and earlier for MediaWiki Description: The issue allows users with administrator privileges to perform cross-site scripting XSS due to the failure to escape verification failure messages. Recommendations: F...