Vulnerability in MediaWiki

CVE-2005-2215

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.

EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.

Affected products

Mediawiki — versions 1.4.1, 1.4.2, 1.4.3
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_SUSE)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)