Description
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Vault Local File Inclusion (0.8.6.6)
IBMHttpServer Improper Input Validation Vulnerability (CVE-2023-26281)
WordPress Plugin Page Builder:PageLayer-Drag and Drop website builder Cross-Site Scripting (1.3.4)
Joomla Other Vulnerability (CVE-2005-3772)
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-1468)