Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.

Remediation

References

CVE-2013-6452

Related Vulnerabilities

Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2025-61795)

WordPress Plugin McAvoy Cross-Site Scripting (0.1.0)

WordPress Plugin DZS Video Gallery Multiple Cross-Site Scripting Vulnerabilities (All)

WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (3.4.4)

Jenkins Origin Validation Error Vulnerability (CVE-2024-23898)

Severity

Medium

Classification

CVE-2013-6452 CWE-707

Tags

Missing Update Known Vulnerabilities