Security Advisory

CVE-2014-7199

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-09-30 14:00:00
Last updated 2024-08-06 12:40:19
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file.