Description

Cross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors related to text extracts.

Remediation

References

CVE-2014-9480

Related Vulnerabilities

WordPress Plugin VN-Calendar Multiple Cross-Site Scripting Vulnerabilities (1.0)

Joomla Improper Input Validation Vulnerability (CVE-2008-4105)

WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3130)

OpenSSL Cryptographic Issues Vulnerability (CVE-2015-4000)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7846)

Severity

Medium

Classification

CVE-2014-9480 CWE-707

Tags

Missing Update Known Vulnerabilities