CVE-2006-2895

Cross-site scripting XSS vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form...

CVE-2006-2895

CVE-2006-2895 is an XSS vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7, allowing remote attackers to inject arbitrary HTML and web script via the edit form. Affected software: MediaWiki (1.6.x up to 1.6.6). Root cause: insufficient input sanitization in the edit form leading to scri...