Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web script or HTML by editing a wiki page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MediaWiki Wiki页跨站攻击漏洞
Vulnerability Description
MediaWiki是一套最早为维基百科量身打造的自由免费的wiki套件。 MediaWiki 1.6.11之前的版本,1.12.2之前的版本1.12.x,和1.13.3之前的版本1.13.x中存在跨站脚本攻击漏洞, 当Internet Explorer被使用且上传被激活时, 或者一个SVG脚本浏览器被使用且SVG上传被激活时,远程验证用户通过编辑一个wiki页，注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A