Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2013-6454

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute.

PublishedMay 12, 2014, 14:55

Published Bysecalert@redhat.com

Affected Versions

No affected versions found.

References

http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html

Weakness Type

CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)