CVE-2014-2854

The CVE concerns the MediaWiki SemanticTitle extension prior to 1.1.0, where a Cross‑Site Scripting (XSS) flaw allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected software: MediaWiki with SemanticTitle