Description

MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Remediation

References

CVE-2011-0003

Related Vulnerabilities

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-2666)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-0365)

WordPress Plugin Image Slider Cross-Site Scripting (1.1.5)

WordPress Plugin Powerhouse Museum Collection Image Grid 'tbpv_username' Parameter Cross-Site Scripting (0.9.1.1)

WordPress Plugin Yoast SEO Cross-Site Scripting (3.4.0)

Severity

Medium

Classification

CVE-2011-0003 CWE-20

Tags

Missing Update Known Vulnerabilities