CVE-2023-37256
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically links these URLs.
Published: 2023-06-29 · CVSS: Unscored
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically links these URLs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7