Description

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.

Remediation

References

CVE-2017-8811

Related Vulnerabilities

WordPress Plugin ULTIMATE TABLES SQL Injection (1.5)

MyBB Other Vulnerability (CVE-2007-1964)

WordPress Plugin Print Invoice & Delivery Notes for WooCommerce Cross-Site Scripting (4.7.1)

WordPress Plugin Acurax On Click Pop Under Multiple Unspecified Vulnerabilities (2.2.1)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6416)

Severity

Medium

Classification

CVE-2017-8811 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities