{"id":"CVE-2024-47847","aliases":[],"url":"https://o3.security/vulnerability/CVE-2024-47847","summary":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This…","details":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.","published":"2024-10-05T01:15:12.493","modified":"2026-06-17T07:57:51.280","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[],"fix":null,"references":[{"type":"FIX","url":"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063804"},{"type":"FIX","url":"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063806"},{"type":"FIX","url":"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063827"},{"type":"FIX","url":"https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063831"},{"type":"ADVISORY","url":"https://phabricator.wikimedia.org/T368628"},{"type":"EXPLOIT","url":"https://phabricator.wikimedia.org/T372211"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T07:57:51.280"}}