CVE-2005-2215
Fixed in a distro release EPSS 1%
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
Products: mediawiki
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mediawiki | 1.4.9 |
| Debian 13 | mediawiki | 1.4.9 |
| Debian 14 | mediawiki | 1.4.9 |