{"id":"CVE-2024-47847","aliases":[],"url":"https://o3.security/vulnerability/CVE-2024-47847","summary":"Mediawiki Cargo extension vulnerable to Cross-site Scripting","details":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.","published":"2024-10-05T03:30:37Z","modified":"2024-10-07T15:27:15.855375Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"mediawiki/cargo","fixedVersion":"3.6.1"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47847"},{"type":"WEB","url":"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063804"},{"type":"WEB","url":"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063806"},{"type":"WEB","url":"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063827"},{"type":"WEB","url":"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063831"},{"type":"PACKAGE","url":"https://github.com/wikimedia/mediawiki-extensions-Cargo"},{"type":"WEB","url":"https://phabricator.wikimedia.org/T368628"},{"type":"WEB","url":"https://phabricator.wikimedia.org/T372211"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-10-07T15:27:15.855375Z"}}