Cross site scripting

Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message...

CVE-2014-9475

Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message...

CVE-2014-9475

Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message...

CVE-2014-9475: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message...

PT-2015-4232

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.19.23 MediaWiki versions 1.20.x through 1.22.15 MediaWiki versions 1.23.x through 1.23.8 MediaWiki versions 1.24.x through 1.24.1 Description A cross-site scripting XSS issue allows remote authenticated users to...