CVE-2004-2152

CVE-2004-2152 affects MediaWiki up to version 1.3.4 in the raw page output mode, enabling cross-site scripting (XSS) by injecting arbitrary script/HTML. The root cause is a vulnerability in how the raw output is handled, permitting remote script execution through crafted content. Public reference...