VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 22, 2023· Updated Jun 17, 2026

CVE-2023-51704

CVE-2023-51704

Description

An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogFormatter.php, group-*-member messages can result in XSS on Special:log/rights.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • MediaWiki/Mediawiki3 versions
    cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: <1.35.14
    • (no CPE)
    • (no CPE)range: <1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2
  • osv-coords
    pkg:bitnami/mediawiki
    Range: < 1.35.14

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.