Improper neutralization of input during web page generation (‘cross-site scripting’) vulnerability in The Wikimedia Foundation Mediawiki – CentralAuth extension allows Stored XSS.
This issue affects Mediawiki – CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.
