CVE-2015-2939

Cross-site scripting XSS vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a function name, which is not properly handled in a Lua error backtrace...

CVE-2015-2939

CVE-2015-2939 is a cross-site scripting (XSS) vulnerability in the MediaWiki Scribunto extension. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted function name, which is mishandled in a Lua error backtrace. This is a client-side input validation fla...

Updated mediawiki packages fix security vulnerabilities

Updated mediawiki packages fix security vulnerabilities: In MediaWiki before 1.23.9, one could circumvent the SVG MIME blacklist for embedded resources. This allowed an attacker to embed JavaScript in the SVG CVE-2015-2931. In MediaWiki before 1.23.9, the SVG filter to prevent injecting JavaScrip...