Description
Cross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22.x before 1.22.9 and 1.23.x before 1.23.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving the multipageimagenavbox class in conjunction with an action=raw value.
Remediation
References
Related Vulnerabilities
WordPress Plugin Paytm-Donation SQL Injection (1.3.2)
WordPress Plugin Edit Author Slug Cross-Site Scripting (1.0.5.1)
MySQL CVE-2023-22059 Vulnerability (CVE-2023-22059)
WordPress Plugin WPFront User Role Editor Unspecified Vulnerability (2.14.1)
WordPress Plugin WP Portfolio Gallery Cross-Site Scripting (1.0.0)