[MEDIUM] User content can redirect the logout button to different URL

PKSA-49h8-xbh2-gnd6 CVE-2020-10959 GHSA-mqhw-wq8p-vf5r

Affected package: mediawiki/core

Affected version: >=1.34.0,<1.34.1

Reported by:
GitHub, FriendsOfPHP/security-advisories