An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| mediawiki/core(Packagist) | 1.34.0 | 1.34.3 | N/A |
| mediawiki/core(Packagist) | 1.35.0-rc.0 | 1.35.0 | N/A |
CVSS Metrics
