← All advisories

Medium severity4.8NVD Advisory· Published Jul 7, 2024· Updated Jun 17, 2026

CVE-2024-40604

CVE-2024-40604

Description

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
Range: <=1.42.1
MediaWiki/Nimbusllm-create
Range: <=1.42.1
osv-coords
pkg:bitnami/mediawiki
Range: < 1.44.0

Patches

Vulnerability mechanics

References

1

phabricator.wikimedia.org/T361450nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.