Description
Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading.
Remediation
References
Related Vulnerabilities
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2016-7053)
WordPress Plugin Cardinity Payment Gateway for WooCommerce Cross-Site Scripting (3.0.6)
WordPress Plugin IMDb Profile Widget Local File Inclusion (1.0.8)
WordPress Plugin Yakadanda Google+ Hangout Events Cross-Site Scripting (0.3.7)
SharePoint Integer Overflow or Wraparound Vulnerability (CVE-2008-4019)