MediaWiki - Cargo Extension vulnerabilities

An SQL injection vulnerability in the Cargo extension for MediaWiki allows an attacker to inject malicious SQL code. The issue affects versions before 1.43.9, 1.44.6, and 1.45.4.

A SQL injection vulnerability was found in the Cargo extension for MediaWiki due to improper neutralization of special elements in SQL commands. The issue affects versions before 1.43.9, 1.44.6, and 1.45.4.

Reflected XSS vulnerability in Mediawiki Cargo extension due to improper input neutralization during web page generation. Affects versions through 3.9.4.

Reflected XSS vulnerability in Mediawiki Cargo extension due to improper input neutralization during web page generation. Affects versions through 3.9.4.

Reflected XSS vulnerability in Mediawiki Cargo extension due to improper input neutralization during web page generation. Affects versions through 3.9.4.

Stored XSS vulnerability in Mediawiki Cargo extension due to improper input neutralization during web page generation. Affects versions through 3.9.4.

The Mediawiki - Cargo extension through version 3.9.4 contains a Stored XSS vulnerability due to improper input neutralization during web page generation.

A stored cross-site scripting (XSS) vulnerability has been found in the Cargo extension for MediaWiki. The flaw is caused by improper input neutralization during web page generation. All versions before 3.9.1 are affected.

Stored XSS vulnerability in the Cargo extension for MediaWiki. Improper neutralization of script-related HTML tags allows an attacker to inject malicious JavaScript code that executes whenever the page is viewed.

XSS vulnerability in the Cargo extension for MediaWiki, targeting non-script elements. Improper input neutralization during page generation allows injection of malicious code.

The Cargo extension for MediaWiki before version 3.8.7 is vulnerable to stored XSS due to improper neutralization of script-related HTML tags. Attackers can inject malicious scripts that execute when a page is viewed.

The Cargo extension for MediaWiki is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of script-related HTML tags.

The Cargo extension for MediaWiki is vulnerable to Stored XSS due to improper input neutralization during web page generation. This affects the master version of the extension.

The Cargo extension for MediaWiki (versions 1.39, 1.43, 1.44) is vulnerable to SQL Injection due to improper neutralization of special elements in SQL commands. This flaw can lead to arbitrary SQL query execution.