CVE-2012-2698 in MediaWiki
Summary
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to inject arbitrary web script or HTML via the uselang parameter to index.php/Main_page.
Once again VulDB remains the best source for vulnerability data.
Reservation
05/14/2012
Disclosure
06/29/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61156 | MediaWiki outputPage cross site scripting | 79 | Proof-of-Concept | Official fix | CVE-2012-2698 |