Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-01-11T00:00:00

Updated: 2024-08-07T12:12:17.283Z

Reserved: 2007-01-10T00:00:00

Link: CVE-2007-0177

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-01-11T00:28:00.000

Modified: 2017-07-29T01:30:02.047

Link: CVE-2007-0177

cve-icon Redhat

No data.