← All advisories

Medium severity4.8NVD Advisory· Published Jul 7, 2024· Updated Jun 17, 2026

CVE-2024-40602

CVE-2024-40602

Description

An issue was discovered in the Tempo skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

MediaWiki/Tempollm-create
Range: <=1.42.1
MediaWiki/Mediawikillm-fuzzy2 versions
<=1.42.1+ 1 more
- (no CPE)range: <=1.42.1
- cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: <=1.42.1
osv-coords
pkg:bitnami/mediawiki
Range: < 1.44.0

Patches

Vulnerability mechanics

References

1

phabricator.wikimedia.org/T361451nvdIssue Tracking

News mentions

0

No linked articles in our index yet.