CVE-2024-40599 Cross-site scripting in n/a

Medium 4.8 Published 6 Jul 2024 Updated 20 Mar 2025

Stored XSS in GuMaxDD skin allows attackers to inject scripts via sidebar menu entries, potentially compromising user sessions.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2024-40599?

CVE-2024-40599 is a medium-severity cross-site scripting vulnerability in Mediawiki Mediawiki, published on 6 Jul 2024. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.

Official description

An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.

Weakness: CWE-79

Which versions are affected by CVE-2024-40599?

1 open source package ship an affected version, including mediawiki. It affects 1 product.

Package	Affected	Fixed in
`mediawiki` Bitnami	All versions	`1.44.0`

Products include Mediawiki Mediawiki.

How do I fix CVE-2024-40599?

Upgrade mediawiki to 1.44.0 or later.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2024-40599 being exploited?

There is no known exploitation of CVE-2024-40599 in the wild and no public exploit code.

All Mediawiki Mediawiki vulnerabilities

Sources

Also known as BIT-mediawiki-2024-40599, GHSA-q6vq-qp5q-w6g2.