Description
Cross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors related to text extracts.
Remediation
References
Related Vulnerabilities
WordPress Plugin JS Help Desk (formerly JS Support Ticket) SQL Injection (2.1.0)
silverstripeCMS Improper Input Validation Vulnerability (CVE-2020-26138)
Oracle Application Server Other Vulnerability (CVE-2007-2122)
PleskLin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4878)
WordPress Plugin Free Live Chat Support Cross-Site Request Forgery (1.0.11)