CVE-2024-23177

Description

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter.

Affected packages (1)

• Bitnami/mediawikifrom 0, < 1.41.1

CVSS scores

References (3)

• WEBhttps://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/message/TDBUBCCOQJUT4SCHJNPHKQNPBUUETY52/
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2024-23177
• WEBhttps://phabricator.wikimedia.org/T348979