MediaWiki ExpandTemplates Extension < 1.24.1 Multiple Vulnerabilities (Jan 2015) - Active Check

The ExpandTemplates extension for MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-9478

Cross-site scripting XSS vulnerability in the preview in the ExpandTemplates extension for MediaWiki, when $wgRawHTML is set to true, allows remote attackers to inject arbitrary web script or HTML via the wpInput parameter to the Special:ExpandTemplates page...

CVE-2014-9478

CVE-2014-9478 affects the MediaWiki ExpandTemplates extension. The vulnerability is a cross-site scripting (XSS) flaw in the preview mode when $wgRawHTML is true, allowing remote attackers to inject arbitrary script/HTML via the wpInput parameter on Special:ExpandTemplates. OpenVAS notes this as ...

CVE-2014-9478

Cross-site scripting XSS vulnerability in the preview in the ExpandTemplates extension for MediaWiki, when $wgRawHTML is set to true, allows remote attackers to inject arbitrary web script or HTML via the wpInput parameter to the Special:ExpandTemplates page...