CVE-2022-29907

The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages.

Date published : 2022-04-28

https://gerrit.wikimedia.org/r/c/786959

https://phabricator.wikimedia.org/T306815