exploitDog

GHSA-vpcq-vv5m-c4vj

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute.

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2013-6454
http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html

EPSS

Процентиль: 71%

0.01459

Низкий

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2013-6454

ubuntu

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute.

CVE-2013-6454

nvd

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute.

CVE-2013-6454

debian

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, ...

EPSS

Процентиль: 71%

0.01459

Низкий

CVE ID

Дефекты

CWE-79