Security Advisory

CVE-2024-23171

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-01-12 00:00:00

Last updated 2025-06-20 16:45:30

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:EventDetails page allows XSS via the x-xss language setting for internationalization (i18n).

← Browse all CVEs View on cve.org ↗