CVSS 3.1 Score 5.4 of 10 (medium)


Published Jan 12, 2024
Updated: Jan 18, 2024


CVE-2024-23174 is a vulnerability discovered in the PageTriage extension of MediaWiki. The affected versions include 1.35.14, 1.36.x through 1.39.x, and 1.40.x before 1.40.2. The vulnerability allows for cross-site scripting (XSS) to occur through various message fields such as rev-deleted-user and pagetriage-tags-quickfilter-label. A total of 103 hits have been recorded for this vulnerability. To remediate the issue, it is recommended to update MediaWiki to version 1.35.14, 1.39.6, or 1.40.2 or later versions that fix the vulnerability. This vulnerability poses a medium risk with a base severity score of 5.4 out of 10 according to NIST's Common Vulnerability Scoring System (CVSS). The exploitability score is rated at 2.3 out of 10, indicating a relatively low difficulty in exploiting the vulnerability remotely over a network connection with required user interaction and low privileges required for successful exploitation

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-23174 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options