| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | = 1.19= 1.19.0= 1.19.1= 1.19.10= 1.19.11= 1.19.12= 1.19.13= 1.19.14= 1.19.15= 1.19.16= 1.19.17= 1.19.18= 1.19.2= 1.19.3= 1.19.4= 1.19.5= 1.19.6= 1.19.7= 1.19.8= 1.19.9= 1.22.0= 1.22.1= 1.22.10= 1.22.11= 1.22.2= 1.22.3= 1.22.4= 1.22.5= 1.22.6= 1.22.7= 1.22.8= 1.22.9= 1.23.0= 1.23.1= 1.23.2= 1.23.3= 1.23.4≤ 1.19.19 |
The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x before 1.22.12 and 1.23.x before 1.23.5 allows remote authenticated users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via crafted CSS, as demonstrated by modifying MediaWiki:Common.css.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free