Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-7295
3.5
LOWCVSS v2
Published
October 7, 2014
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x before 1.22.12 and 1.23.x before 1.23.5 allows remote authenticated users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via crafted CSS, as demonstrated by modifying MediaWiki:Common.css.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.23.0, = 1.22.8, = 1.19, = 1.19.8, = 1.23.4, = 1.22.10, = 1.22.6, = 1.22.0, = 1.19.15, = 1.19.16, = 1.19.18, = 1.22.5, = 1.22.7, = 1.19.1, = 1.19.10, = 1.19.5, = 1.19.6, = 1.19.9, = 1.23.1, = 1.23.3, = 1.19.11, = 1.22.3, <= 1.19.19, = 1.19.3, = 1.22.9, = 1.19.17, = 1.22.4, = 1.19.0, = 1.19.7, = 1.23.2, = 1.19.13, = 1.19.2, = 1.19.4, = 1.22.1, = 1.19.12, = 1.19.14, = 1.22.2, = 1.22.11NVD
mediawiki
NPMA JavaScript framework for the MediaWiki API.
NPMA JavaScript framework for the MediaWiki API.= 1.23.0, = 1.22.8, = 1.19, = 1.19.8, = 1.23.4, = 1.22.10, = 1.22.6, = 1.22.0, = 1.19.15, = 1.19.16, = 1.19.18, = 1.22.5, = 1.22.7, = 1.19.1, = 1.19.10, = 1.19.5, = 1.19.6, = 1.19.9, = 1.23.1, = 1.23.3, = 1.19.11, = 1.22.3, <= 1.19.19, = 1.19.3, = 1.22.9, = 1.19.17, = 1.22.4, = 1.19.0, = 1.19.7, = 1.23.2, = 1.19.13, = 1.19.2, = 1.19.4, = 1.22.1, = 1.19.12, = 1.19.14, = 1.22.2, = 1.22.11
