Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute.

Remediation

References

CVE-2013-6454

Related Vulnerabilities

WordPress Denial of Service Vulnerability (3.5 - 3.6.1)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.33)

Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-6477)

MySQL CVE-2014-6495 Vulnerability (CVE-2014-6495)

Joomla Credentials Management Errors Vulnerability (CVE-2016-9081)

Severity

Medium

Classification

CVE-2013-6454 CWE-707

Tags

Missing Update Known Vulnerabilities