CVE-2023-45361: Mediawiki

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-intro-page MalformedTitleException is uncaught if it is not a valid title, leading to incorrect web pages.

Affected products

• Mediawiki Mediawiki: before 1.40.1 (fixed in 1.40.1)

Published 2024-10-09. Last modified 2026-06-17.