Description
Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive "cross-site" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results.
Remediation
References
Related Vulnerabilities
WordPress Ultimate Member Plugin Improper Privilege Management Vulnerability (CVE-2020-36156)
Claroline Other Vulnerability (CVE-2007-3517)
WordPress Plugin Contest Gallery-Photo Contest for WordPress SQL Injection (13.1.0.5)
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Security Bypass (9.3.2)
Drupal Improper Input Validation Vulnerability (CVE-2016-9452)