CVE-2024-40605

State: PUBLISHED · Published: 2024-07-06 · Updated: 2025-03-14 · Assigner: mitre

Description

An issue was discovered in the Foreground skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.

CWE

CWE-79 — CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected

CVSS

References

Source

cvelistV5-main/cves/2024/40xxx/CVE-2024-40605.json