Description

Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the page move template.

Remediation

References

CVE-2005-2396

Related Vulnerabilities

Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-15929)

WordPress Plugin LeaderBoard Cross-Site Request Forgery (1.1.1)

PHP Use After Free Vulnerability (CVE-2016-5771)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3766)

Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42120)

Severity

Medium

Classification

CVE-2005-2396

Tags

Missing Update Known Vulnerabilities