CVE-2014-9507

MediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is enabled, allows remote attackers to conduct cross-site scripting XSS attacks by setting the content model for a revision to JS...

PT-2015-4252

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.21.x through 1.23.x before 1.23.7 MediaWiki version 1.22.x before 1.22.14 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks by setting the content model for a revision to JS when the...