CVE-2013-4307 in MediaWiki
Summary
Multiple cross-site scripting (XSS) vulnerabilities in repo/includes/EntityView.php in the Wikibase extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allow (1) remote attackers to inject arbitrary web script or HTML via a label in the "In other languages" section or (2) remote administrators to inject arbitrary web script or HTML via a description.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
06/12/2013
Disclosure
09/12/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 10133 | MediaWiki cross site scripting | 79 | High | Official fix | CVE-2013-4307 |