Vulnerabilities (CVE)

Filtered by vendor Mediawiki Subscribe
Filtered by product Mediawik
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-4589 1 Mediawiki 2 Mediawik, Mediawiki 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arbitrary web script or HTML via the ip parameter.