CVE-2014-9479

Publication date

2015-01-16 16:00:00

Family

debian

State

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the preview in the TemplateSandbox extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via the text parameter to Special:TemplateSandbox.