Description

Cross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to videos.

Remediation

References

CVE-2013-4574

Related Vulnerabilities

WordPress Plugin WordPress Automatic Security Bypass (3.53.2)

Internet Information Services Configuration Vulnerability (CVE-2003-1566)

MySQL CVE-2023-22005 Vulnerability (CVE-2023-22005)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.7.1.5)

Oracle Database Server CVE-2012-3146 Vulnerability (CVE-2012-3146)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-4574