Description

MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Remediation

References

CVE-2014-5243

Related Vulnerabilities

Magento Incorrect Authorization Vulnerability (CVE-2020-9587)

WordPress Plugin Paid Business Listings Blind SQL Injection (1.0.2)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Directory Traversal (5.6.23)

WordPress 4.4.x Prototype Pollution (4.4 - 4.4.26)

Oracle Database Server CVE-2014-6542 Vulnerability (CVE-2014-6542)

Severity

Medium

Classification

CVE-2014-5243 CWE-20

Tags

Missing Update Known Vulnerabilities