MediaWiki ExpandTemplate Extension Cross-Site Scripting Vulnerability

MediaWiki is a Wiki program. A cross-site scripting vulnerability exists in the preview mode of the MediaWiki ExpandTemplate extension, which can be exploited by remote attackers to inject arbitrary web script or HTML...