Unrated
The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages.
CVE-2022-29907
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web gerrit.wikimedia.org
- web phabricator.wikimedia.org