MediaWiki Bucket Extension Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the MediaWiki Bucket extension, prior to version 2.1.1. This issue allows an attacker to inject malicious scripts into any Bucket table field designated as 'PAGE' type. The injected script executes when a user views the corresponding Bucket namespace page. The vulnerability was introduced in version 2.1.0 and is now patched in version 2.1.1.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the affected Bucket namespace page.

Remediation

Users can update to Bucket extension version 2.1.1 to address this vulnerability.