Search Results (Refine Search)
- CPE Product Version: cpe:/a:mediawiki:mediawiki:1.17.5
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2013-2031 |
MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a CDATA section containing valid UTF-7 encoded sequences in a SVG file, which is then incorrectly interpreted as UTF-8 by Chrome and Firefox. Published: November 17, 2013; 9:55:07 PM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |