Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute.

Remediation

References

CVE-2013-6454

Related Vulnerabilities

Perl Out-of-bounds Write Vulnerability (CVE-2023-47039)

WordPress Plugin Modern Events Calendar Lite Security Bypass (5.1.6)

WordPress Plugin WP Safe Search 'v1' Parameter Cross-Site Scripting (0.7)

MySQL CVE-2023-21877 Vulnerability (CVE-2023-21877)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1579)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-6454