EUVD-2017-17754

Malware in sbrugna...

CVE-2017-8811: Improper Input Validation

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks...

PT-2017-18545

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.27.4 MediaWiki versions 1.28.x prior to 1.28.3 MediaWiki versions 1.29.x prior to 1.29.2 Description The issue affects the implementation of raw message parameter expansion, allowing HTML mangling attacks...