Description

Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177.

Remediation

References

CVE-2007-1055

Related Vulnerabilities

PHP Resource Management Errors Vulnerability (CVE-2015-8877)

WordPress Plugin XforWooCommerce Security Bypass (1.6.4)

WordPress Cryptographic Issues Vulnerability (CVE-2014-9037)

WordPress Plugin WP jPlayer Cross-Site Scripting (0.1)

Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-20409)

Severity

Medium

Classification

CVE-2007-1055 CWE-94

Tags

Missing Update Known Vulnerabilities