mediawiki: Cross-site Scripting (XSS)

2014-09-29T00:00:00
ID ASA-201409-4
Type archlinux
Reporter Arch Linux
Modified 2014-09-29T00:00:00

Description

It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting.