Description

Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form.

Remediation

References

CVE-2006-2895

Related Vulnerabilities

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Cross-Site Request Forgery (5.5.6)

Oracle JRE CVE-2013-2457 Vulnerability (CVE-2013-2457)

WordPress Plugin WordPress Simple Ecommerce Shopping Cart-Sell products through Paypal Arbitrary File Upload (2.2.5)

WordPress Plugin Tera Charts Multiple Local File Inclusion Vulnerabilities (0.1)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-5315)

Severity

Low

Classification

CVE-2006-2895

Tags

Missing Update Known Vulnerabilities