tocsin

Debian/mediawiki: unknown

Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers t

Action: Upgrade mediawiki to 1.7.1-6 or later.

Affected

introducedfixedlast affected
01.7.1-6-

Fixed versions

1.7.1-6

Sources

published · modified · JSON