Description

Cross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors related to text extracts.

Remediation

References

CVE-2014-9480

Related Vulnerabilities

ownCloud Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-23948)

Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-14322)

WordPress Plugin Simple Feature Requests Free Unspecified Vulnerability (1.0.4)

WordPress Plugin Simple File List Arbitrary File Upload (4.2.2)

XOOPS Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-0613)

Severity

Medium

Classification

CVE-2014-9480 CWE-707

Tags

Missing Update Known Vulnerabilities