CVE-2014-9480

Cross-site scripting XSS vulnerability in the Hovercards extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors related to text extracts...

CVE-2014-9480

The CVE-2014-9480 entry concerns the MediaWiki Hovercards extension. The connected OpenVAS entries describe a cross-site scripting (XSS) vulnerability in Hovercards for MediaWiki, exploitable via injection of arbitrary web script or HTML through text extract vectors. The issue is tied to Hovercar...