Description

Cross-site scripting (XSS) vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier before SVN 20070910 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a similar issue to CVE-2007-4828.

Remediation

References

CVE-2007-4883

Related Vulnerabilities

WordPress Plugin PushEngage Web Push Notifications Cross-Site Scripting (1.5.8)

Oracle HTTP Server Other Vulnerability (CVE-2002-0656)

Jetty Weak Authentication Vulnerability (CVE-2023-41900)

WordPress Plugin ImageInject Multiple Vulnerabilities (1.15)

WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Request Forgery (4.7.5)

Severity

Medium

Classification

CVE-2007-4883 CWE-707

Tags

Missing Update Known Vulnerabilities