CVE-2023-45360

An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2023-11-03

Last modified

2025-11-04

Weaknesses

CWE-79

Affected products

• Mediawiki (Mediawiki)

References

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECL…
• https://phabricator.wikimedia.org/T340221
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6…