Security Advisory for MediaWiki versions:
1.6.x branch before 1.6.10
1.7.x branch before 1.7.3
1.8.x branch before 1.8.4
1.9.x branch before 1.9.3
Vulnerabilities found:
- Cross-Site Scripting
- UTF-7 Cross-Site Scripting
Also on:
BID 21956
MediaWiki patch announcement
RSnake expand the MediaWiki 1.9.2 UTF-7 XSS exploit
Categories: Advisories