Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2024-23171 — MEDIUM severity vulnerability | Release Alert

CVE-2024-23171

5.4

MEDIUMCVSS v3

Published

January 12, 2024

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:EventDetails page allows XSS via the x-xss language setting for internationalization (i18n).

wikimedia/mediawiki

GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.

< 1.35.14, >= 1.36.0, < 1.39.6, >= 1.40.0, < 1.40.2NVD

bitnami/mediawiki

Docker Hub🛑 DEPRECATED Bitnami Docker Image for MediaWiki

< 1.35.14, >= 1.36.0, < 1.39.6, >= 1.40.0, < 1.40.2NVD

More on this CVE

NVD↗GitHub Advisory↗

Docker HubMediaWiki is a free software open source wiki package written in PHP.

< 1.35.14, >= 1.36.0, < 1.39.6, >= 1.40.0, < 1.40.2NVD

NPMA JavaScript framework for the MediaWiki API.

< 1.35.14, >= 1.36.0, < 1.39.6, >= 1.40.0, < 1.40.2NVD

Python Package IndexMediaWiki Syntax to HTML

< 1.35.14, >= 1.36.0, < 1.39.6, >= 1.40.0, < 1.40.2NVD

Crates.ioA MediaWiki client library

< 1.35.14, >= 1.36.0, < 1.39.6, >= 1.40.0, < 1.40.2NVD