Description

Cross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2007-4828

Related Vulnerabilities

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9452)

Oracle Database Server CVE-2019-2940 Vulnerability (CVE-2019-2940)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-0799)

Check for apache versions up to 1.3.25, 2.0.38

MediaWiki Resource Management Errors Vulnerability (CVE-2015-2942)

Severity

Medium

Classification

CVE-2007-4828 CWE-707

Tags

Missing Update Known Vulnerabilities