Description
Cross-site scripting (XSS) vulnerability in contrib/cssgen.php in the GeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin TAKETIN To WP Membership PHP Object Injection (1.2.7)
WordPress Plugin WooCommerce Checkout For Digital Goods Cross-Site Request Forgery (2.2)
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce SQL Injection (1.3.6)
Oracle JRE CVE-2011-3547 Vulnerability (CVE-2011-3547)
WordPress Plugin PowerPack Pro for Elementor Privilege Escalation (2.10.14)