Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.

Remediation

References

CVE-2013-6452

Related Vulnerabilities

Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1907)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37390)

WordPress Plugin Ceceppa Multilingua Cross-Site Scripting (1.5.17)

WordPress Plugin MailArchiver Cross-Site Scripting (2.10.1)

WordPress Plugin WP eCommerce Security Bypass (3.8.14.3)

Severity

Medium

Classification

CVE-2013-6452 CWE-707

Tags

Missing Update Known Vulnerabilities