CVE-2016-6333 | BDVDB-2026-84407 Detail

Description#

Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
https://bugzilla.redhat.com/show_bug.cgi?id=1369613
https://phabricator.wikimedia.org/T133147
http://www.securityfocus.com/bid/98053

Exploit#

No public exploit known

History#

Version 12017-04-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.