Vulnerabilities > Mediawiki > Mediawik > Medium

DATE CVE VULNERABILITY TITLE RISK
2010-01-07 CVE-2009-4589 Cross-Site Scripting vulnerability in Mediawiki Mediawik and Mediawiki
Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arbitrary web script or HTML via the ip parameter.
network
mediawiki CWE-79
4.3