MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-3966 - Vulnerability Database

MediaWiki

MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-3966

Low

Reference: CVE-2014-3966

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-3966

Title: MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16 1.21.x before 1.21.10 and 1.22.x before 1.22.7 when wgRawHtml is enabled allows remote attackers to inject arbitrary web script or HTML via an invalid username.