Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2023-45360

An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.

  • Published: Nov 3, 2023
  • Updated: Nov 10, 2023
  • CVE: CVE-2023-45360
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mediawiki / mediawiki 1.40.0 1.40.0.x
mediawiki / mediawiki - 1.35.12
mediawiki / mediawiki 1.40.0-rc0 1.40.0-rc0.x
mediawiki / mediawiki 1.39.0 1.39.5