Description

Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2007-0177

Related Vulnerabilities

TYPO3 Other Vulnerability (CVE-2006-5069)

Joomla Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2019-12765)

MySQL CVE-2022-21280 Vulnerability (CVE-2022-21280)

Apache HTTP Server Other Vulnerability (CVE-2001-0729)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25812)

Severity

Medium

Classification

CVE-2007-0177

Tags

Missing Update Known Vulnerabilities