Unrated

An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via the phonos-purge-needed-error me...

CVE-2024-23178 First seen on SecPulse Jan 12, 2024

Original description The description as published by the source.

An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via the phonos-purge-needed-error message.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web lists.wikimedia.org
web phabricator.wikimedia.org

Key facts

Severity: Unrated
Published: Jan 12, 2024
First seen on SecPulse: Jan 12, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:03