← back
CVE-2013-1951

CVE-2013-1951

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
exploitation probability
1.6%top 26% of all CVEs
observed exploitation
nono source reports it
A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.
Affected products
ikimedia Foundation · MediaWiki
References
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104022.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-April/104027.htmlhttps://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-1951https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1951http://security.gentoo.org/glsa/glsa-201310-21.xmlhttps://phabricator.wikimedia.org/T48084https://security-tracker.debian.org/tracker/CVE-2013-1951http://www.openwall.com/lists/oss-security/2013/04/16/12http://www.securityfocus.com/bid/59077