Description
MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attr(title url);" attack within a DIV element that has an attacker-controlled URL in the title attribute.
Remediation
References
Related Vulnerabilities
Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2020-0618)
WordPress Plugin Easy Appointments Cross-Site Scripting (3.11.0)
PHP Incorrect Conversion between Numeric Types Vulnerability (CVE-2018-5711)
MySQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2005-0709)