2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message...
3.5CVSS5.6AI score0.01449EPSS
SaveExploits0References5Affected Software1
CVE-2014-9475
Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message...
3.5CVSS7.7AI score0.01449EPSS
SaveExploits0
20