Description

MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Remediation

References

CVE-2014-5243

Related Vulnerabilities

ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4547)

WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.6)

PHP Out-of-bounds Read Vulnerability (CVE-2019-19246)

Moodle Other Vulnerability (CVE-2019-10154)

WordPress Plugin LearnDash LMS SQL Injection (3.1.5)

Severity

Medium

Classification

CVE-2014-5243 CWE-20

Tags

Missing Update Known Vulnerabilities