Cpe:2.3:a:wikimedia:pageforms:*:*:*:*:*:*:*:*

A stored XSS vulnerability in the PageForms extension allows attackers with page-edit permissions to inject malicious javascript: URIs via the redirect parameter.