MediaWiki XXE Vulnerability - Windows

The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service DoS, or possibly have other impact via an XML external entity XXE attack. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...

CVE-2014-9475

CVE-2014-9475 is an XSS in MediaWiki's thumb.php allowing remote authenticated users to inject arbitrary script/HTML via a wikitext message. Affected are MediaWiki versions: before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1. Connected sources corroborate these af...