CVE-2014-9478

Cross-site scripting XSS vulnerability in the preview in the ExpandTemplates extension for MediaWiki, when $wgRawHTML is set to true, allows remote attackers to inject arbitrary web script or HTML via the wpInput parameter to the Special:ExpandTemplates page...

CVE-2014-9478

CVE-2014-9478 affects the MediaWiki ExpandTemplates extension. The vulnerability is a cross-site scripting (XSS) flaw in the preview mode when $wgRawHTML is true, allowing remote attackers to inject arbitrary script/HTML via the wpInput parameter on Special:ExpandTemplates. OpenVAS notes this as ...

CVE-2014-9478

Cross-site scripting XSS vulnerability in the preview in the ExpandTemplates extension for MediaWiki, when $wgRawHTML is set to true, allows remote attackers to inject arbitrary web script or HTML via the wpInput parameter to the Special:ExpandTemplates page...