Description

Cross-site scripting (XSS) vulnerability in contrib/cssgen.php in the GeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2015-6734

Related Vulnerabilities

Django Incorrect Regular Expression Vulnerability (CVE-2018-7537)

MySQL CVE-2019-2814 Vulnerability (CVE-2019-2814)

WordPress Plugin WPGlobus-Multilingual Everything! Multiple Vulnerabilities (1.9.6)

WordPress Plugin YITH WooCommerce Gift Cards Security Bypass (1.3.7)

Python Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-4616)

Severity

Medium

Classification

CVE-2015-6734 CWE-707

Tags

Missing Update Known Vulnerabilities