Is CVE-2024-23176 being exploited?

No public exploit is currently tracked.

How severe is CVE-2024-23176?

CVE-2024-23176 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2024-23176

Description

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS.