Patchwire CVEs, their patch status, and feeds to follow them

CVE-2005-2396

Fixed in a distro release EPSS 2%

Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the page move template.

Published 2005-07-27 · CVE record · OSV

Products: mediawiki

Distro releases

ReleasePackageFixed in
Debian 12mediawiki1.4.9
Debian 13mediawiki1.4.9
Debian 14mediawiki1.4.9