Description
Cross-site scripting (XSS) vulnerability in MediaWiki 1.9.x before 1.9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "sortable tables JavaScript."
References
- ADV-2007-0490 vdb-entry
- 24039 third-party-advisory
- http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_9_2/phase3/RELEASE-NOTES
- [MediaWiki-announce] 20070204 MediaWiki 1.9.2 released mailing-list
- mediawiki-sortabletable-xss(32217) vdb-entry
- 33091 vdb-entry
- 22397 vdb-entry