Description

Cross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22.x before 1.22.9 and 1.23.x before 1.23.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving the multipageimagenavbox class in conjunction with an action=raw value.

Remediation

References

CVE-2014-5242

Related Vulnerabilities

Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-6975)

WordPress Plugin Comment Extra Fields Multiple Cross-Site Scripting Vulnerabilities (1.7)

Oracle Database Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-2111)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (3.0.17)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.19)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2014-5242