Description

Cross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors related to text extracts.

Remediation

References

CVE-2014-9480

Related Vulnerabilities

WordPress Plugin 123devis-affiliation Cross-Site Scripting (1.0.4)

WordPress Plugin Localize My Post Local File Inclusion (1.0)

Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2010-1433)

MySQL CVE-2022-21617 Vulnerability (CVE-2022-21617)

Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-38002)

Severity

Medium

Classification

CVE-2014-9480 CWE-707

Tags

Missing Update Known Vulnerabilities