[MEDIUM] Mediawiki Cargo extension vulnerable to Cross-site Scripting

PKSA-jhhg-wm4v-k48f CVE-2024-47847 GHSA-jqvm-9xm2-gc38

Affected package: mediawiki/cargo

Affected version: <3.6.1

Reported by:
GitHub