Description
Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form.
References
- ADV-2006-2159 vdb-entry
- http://svn.wikimedia.org/viewvc/mediawiki/tags/REL1_6_7/phase3/RELEASE-NOTES
- [MediaWiki-announce] 20060606 MediaWiki 1.6.7 released mailing-list
- 20458 third-party-advisory
- mediawiki-edit-form-xss(27029) vdb-entry