CVE Catalog
CVE-2023-36675
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.72%
49th percentile - higher than 49% of all known CVEs
Summary
An issue was discovered in MediaWiki before 1.35.11, and in versions 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4, allowing XSS in the partial blocks feature in BlockLogFormatter.php.
Risk Assessment
XSS attacks can lead to user data theft and session hijacking, posing a serious security threat to the application and its users.
Recommendation
It is recommended to update MediaWiki to the latest version to mitigate this vulnerability and reduce the risk of attacks.
Original NVD description (English source)
An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature.