CVE-2013-4308 in Liquidthreads Project MediaWiki

요약 (영어)

Cross-site scripting (XSS) vulnerability in pages/TalkpageHistoryView.php in the LiquidThreads (LQT) extension 2.x and possibly 3.x for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to inject arbitrary web script or HTML via a thread subject.

예약하다

2013. 06. 12.

공개

2013. 09. 12.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
10132	Liquidthreads Project MediaWiki LiquidThreads Extension TalkpageHistoryView.php 크로스 사이트 스크립팅	79	높음	공식 수정	CVE-2013-4308