CVE-2023-37304

Summary

CVE-2023-37304 is a vulnerability affecting the DoubleWiki extension for MediaWiki versions up to 1.39.3. The issue lies in the includes/DoubleWiki.php file, which fails to adequately sanitize user input in the column alignment feature. This leads to Cross-Site Scripting (XSS) attacks, allowing malicious actors to inject malicious scripts into web pages viewed by other users. Successful exploitation of this vulnerability could result in unauthorized access to user data, session hijacking, or other malicious activities. To mitigate the risk, users are advised to update their MediaWiki installations to the latest version, which includes a fix for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.