Security Advisory

CVE-2013-4303

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-12-11 18:30:37

Last updated 2024-08-06 16:38:01

Assigner redhat

State PUBLISHED

Description

includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 does not properly detect extensions when there are an even number of "." (period) characters in a string, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the siprop parameter in a query action to wiki/api.php.

← Browse all CVEs View on cve.org ↗