CVE-2024-40604 - An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1

MEDIUM

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1

Published Jul 6, 2024

4.8

MEDIUM

CVSS 3.1

EPSS 0.32%

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-38540		Advisory
https://phabricator.wikimedia.org/T361450		ExploitIssue Tracking

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 6, 2024

Updated Mar 18, 2025

Reserved Jul 6, 2024

Updated Jul 8, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jul 6, 2024

Updated Mar 18, 2025

Exploited since n/a