CVE-2014-9477

Multiple cross-site scripting XSS vulnerabilities in the Listings extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 url parameter...

CVE-2014-9477

The CVE-2014-9477 entry refers to multiple XSS vulnerabilities in the MediaWiki Listings extension, exploitable via the (1) name or (2) url parameters to inject arbitrary web script or HTML. Affected component: Listings extension for MediaWiki; impact: potential remote script execution or HTML in...