Mediawiki Cirrussearch Extension
Monthly
Reflected cross-site scripting (XSS) in the MediaWiki CirrusSearch extension through version 1.46.0 allows remote attackers to inject malicious scripts into search pages via crafted links, requiring a victim to click the link. The vulnerability carries moderate severity (CVSS 4.0 score 5.5) because exploitation is client-side only, with low confidentiality impact and no integrity or availability impact. Publicly available proof-of-concept exploit code exists, but there is no indication of active exploitation (not in CISA KEV). Only wikis that have installed the CirrusSearch extension, typically Elasticsearch-backed deployments, are affected.
Reflected cross-site scripting (XSS) in the MediaWiki CirrusSearch extension through version 1.46.0 allows remote attackers to inject malicious scripts into search pages via crafted links, requiring a victim to click the link. The vulnerability carries moderate severity (CVSS 4.0 score 5.5) because exploitation is client-side only, with low confidentiality impact and no integrity or availability impact. Publicly available proof-of-concept exploit code exists, but there is no indication of active exploitation (not in CISA KEV). Only wikis that have installed the CirrusSearch extension, typically Elasticsearch-backed deployments, are affected.