Wikimedia Foundation MediaWiki PageTriage Extension Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the PageTriage extension for MediaWiki. This issue arises from improper input sanitization during web page generation, allowing malicious users to inject harmful scripts that are saved and executed later. The vulnerability affects PageTriage versions from master prior to 1.44.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the page.