CVE-2009-4589

Fixed in a distro release EPSS 1%

Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arbitrary web script or HTML via the ip parameter.

Published 2010-01-07 · CVE record · OSV

Products: mediawiki mediawik, mediawiki

Distro releases