Description
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.
Remediation
References
Related Vulnerabilities
Drupal Core 4.7.x SQL Injection (4.7.0 - 4.7.8)
Oracle Database Server CVE-2011-0882 Vulnerability (CVE-2011-0882)
WordPress Plugin Popup by Supsystic Cross-Site Scripting (1.10.4)
WordPress Plugin WordPress prettyPhoto Cross-Site Scripting (1.1)
OpenSSL Missing Encryption of Sensitive Data Vulnerability (CVE-2019-1563)