Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-6334
Description:Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving replacement of percent encoding in unclosed internal links.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-6334
BugTraq ID: 98057
http://www.securityfocus.com/bid/98057
https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html




© 1998-2025 E-Soft Inc. All rights reserved.