Description

Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

Remediation

References

CVE-2013-4305

Related Vulnerabilities

WordPress Plugin Inline Gallery 'do' Parameter Cross-Site Scripting (0.3.9)

WordPress Plugin EventCommerce WP Event Calendar Cross-Site Scripting (1.0)

WordPress 'wp-trackback.php' SQL Injection Vulnerability (1.5)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.6.6)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Unspecified Vulnerability (4.3.4)

Severity

Medium

Classification

CVE-2013-4305 CWE-707

Tags

Missing Update Known Vulnerabilities