Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file.

Remediation

References

CVE-2014-7199

Related Vulnerabilities

Apache HTTP Server CVE-2024-40725 Vulnerability (CVE-2024-40725)

WordPress 'cat' Parameter SQL Injection Vulnerability (1.5 - 1.5.1.1)

PHP Deserialization of Untrusted Data Vulnerability (CVE-2007-1701)

e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-17081)

WordPress Plugin Access Demo Importer Arbitrary File Upload (1.0.6)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2014-7199