Unscored CVE-2015-6737 EUVD-2015-6675GHSA-2v58-7mwh-3r84

Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbitrary web script or H…

Published Sep 1, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors involving base64 encoded content.

References

GLSA-201510-05 vendor-advisory
[oss-security] 20150827 Re: CVE Request: MediaWiki 1.25.2, 1.24.3, 1.23.10 mailing-list
[oss-security] 20150812 CVE Request: MediaWiki 1.25.2, 1.24.3, 1.23.10 mailing-list
[MediaWiki-announce] 20150810 MediaWiki Security and Maintenance Releases: 1.25.2, 1.24.3, 1.23.10 mailing-list
FEDORA-2015-13920 vendor-advisory
76858 vdb-entry