Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin Image Photo Gallery Final Tiles Grid Security Bypass (3.3.52)
WordPress Plugin WP-Matomo (WP-Piwik) Cross-Site Scripting (1.0.10)
SharePoint Download of Code Without Integrity Check Vulnerability (CVE-2020-1453)
WordPress Plugin Phoenix Media Rename Security Bypass (3.4.2)
WordPress Plugin Disqus Comment System Multiple Cross-Site Request Forgery Vulnerabilities (2.77)