Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2023-37251 — MEDIUM severity vulnerability | Release Alert

CVE-2023-37251

6.1

MEDIUMCVSS v3

Published

June 29, 2023

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not properly escape JavaScript in the onclick handler and does not prevent use of javascript: URLs.

wikimedia/mediawiki

GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.

<= 1.39.3NVD

bitnami/mediawiki

Docker Hub🛑 DEPRECATED Bitnami Docker Image for MediaWiki

<= 1.39.3NVD

More on this CVE

NVD↗GitHub Advisory↗

NPMA JavaScript framework for the MediaWiki API.

<= 1.39.3NVD

Python Package IndexMediaWiki Syntax to HTML

<= 1.39.3NVD

Crates.ioA MediaWiki client library

<= 1.39.3NVD