Description
Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-2799 | Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action. |
Github GHSA |
GHSA-6h86-9r5g-f2h5 | Cross-site scripting vulnerability in includes/actions/InfoAction.php |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T10:28:46.374Z
Reserved: 2014-04-14T00:00:00.000Z
Link: CVE-2014-2853
No data.
Status : Deferred
Published: 2014-04-29T18:55:08.723
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-2853
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA