Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2014-04-29T18:00:00

Updated: 2015-05-12T18:57:00

Reserved: 2014-04-14T00:00:00


Link: CVE-2014-2853

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2014-04-29T18:55:08.723

Modified: 2015-09-10T15:28:57.910


Link: CVE-2014-2853

JSON object: View

cve-icon Redhat Information

No data.

CWE