Description

MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Remediation

References

CVE-2014-5243

Related Vulnerabilities

Dolibarr Inadequate Encryption Strength Vulnerability (CVE-2017-7888)

PHP Other Vulnerability (CVE-2007-1835)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Multiple Cross-Site Scripting Vulnerabilities (1.8.4.2)

phpMyFAQ Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-0788)

Django Incorrect Default Permissions Vulnerability (CVE-2019-19118)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2014-5243