Home

Description

An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.

PUBLISHED Reserved 2023-10-09 | Published 2023-11-03 | Updated 2025-11-04 | Assigner mitre

References

phabricator.wikimedia.org/T340221

lists.fedoraproject.org/...FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/ (FEDORA-2024-2c564b942d) vendor-advisory

lists.fedoraproject.org/...FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/

phabricator.wikimedia.org/T340221

lists.fedoraproject.org/...FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/ (FEDORA-2024-2c564b942d) vendor-advisory

cve.org (CVE-2023-45360)

nvd.nist.gov (CVE-2023-45360)

Download JSON