Description

Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2007-0177

Related Vulnerabilities

Caddy Web Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2026-30852)

PostgreSQL Cryptographic Issues Vulnerability (CVE-2011-2483)

Joomla! Core Cross-Site Scripting (2.5.0 - 3.9.24)

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20965)

Jenkins Missing Authorization Vulnerability (CVE-2017-1000400)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2007-0177