Vulnerability Database

310,449

Total vulnerabilities in the database

CVE-2024-23172

An issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur via message definitions. e.g., in SpecialCheckUserLog.

  • Published: Jan 12, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-23172
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mediawiki / mediawiki - 1.35.14
mediawiki / mediawiki 1.36.0 1.39.6
mediawiki / mediawiki 1.40.0 1.40.2