tocsin

Debian/mediawiki: unknown

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) comments, aka "CSS injection

Action: Upgrade mediawiki to 1:1.15.5-3 or later.

Affected

introducedfixedlast affected
01:1.15.5-3-

Fixed versions

1:1.15.5-3

Sources

published · modified · JSON