Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.

Remediation

References

CVE-2013-6452

Related Vulnerabilities

WebLogic CVE-2020-14859 Vulnerability (CVE-2020-14859)

WordPress Other Vulnerability (CVE-2016-2222)

WordPress Plugin Easy Testimonials Cross-Site Scripting (1.36.1)

MySQL CVE-2012-1734 Vulnerability (CVE-2012-1734)

WordPress Plugin Cookie Notice & Compliance for GDPR/CCPA Cross-Site Scripting (2.1.1)

Severity

Medium

Classification

CVE-2013-6452 CWE-707

Tags

Missing Update Known Vulnerabilities