Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file.

Remediation

References

CVE-2014-7199

Related Vulnerabilities

WordPress Plugin Verse-O-Matic Cross-Site Request Forgery (4.1.1)

Liferay Portal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5327)

Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6817)

Moodle Improper Input Validation Vulnerability (CVE-2012-1168)

Liferay DXP CVE-2021-29041 Vulnerability (CVE-2021-29041)

Severity

Medium

Classification

CVE-2014-7199 CWE-707

Tags

Missing Update Known Vulnerabilities