Description

Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML.

Remediation

References

CVE-2004-2152

Related Vulnerabilities

WordPress Plugin Broadcast Live Video-Live Streaming:HTML5, WebRTC, HLS, RTSP, RTMP PHP Object Injection (4.67.8)

Python Integer Overflow or Wraparound Vulnerability (CVE-2022-37454)

Drupal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-13675)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-4792)

Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343)

Severity

Medium

Classification

CVE-2004-2152

Tags

Missing Update Known Vulnerabilities