An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. XSS can occur via formatNumNoSeparators.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "1.35.12"
},
{
"introduced": "1.36.0"
},
{
"fixed": "1.39.5"
},
{
"introduced": "0"
},
{
"last_affected": "1.40.0-NA"
}
]
}