Description
Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.14)
MySQL CVE-2015-0438 Vulnerability (CVE-2015-0438)
WordPress Plugin Easy Testimonials Cross-Site Scripting (3.0.4)
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5502)
WordPress Plugin WassUp Real Time Analytics Unspecified Vulnerability (1.7.2)