Forced logout and external redirect via selector reuse

Open redirect in MediaWiki before 1.35 allows remote attackers to force a logout and redirect users through crafted page HTML. The ready.js logout handler reruns the global #pt-logout a selector to obtain its destination instead of using the clicked link, so an earlier matching element in user content supplies the redirect URL. A victim must view the crafted page and activate the logout control; exploitation ends the session and navigates the browser to an attacker-chosen external site.