CVE-2010-1647: XSS
Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) strings that are processed as script by Internet Explorer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1647?
The severity of CVE-2010-1647 is classified as medium due to its cross-site scripting (XSS) vulnerability.
How do I fix CVE-2010-1647?
To fix CVE-2010-1647, upgrade MediaWiki to version 1.15.4 or 1.16 beta 3 or later.
What types of attacks are possible with CVE-2010-1647?
CVE-2010-1647 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts or HTML.
Which versions of MediaWiki are affected by CVE-2010-1647?
MediaWiki versions 1.15.0 to 1.15.3 and 1.16.0 beta1 and beta2 are affected by CVE-2010-1647.
What is the impact of CVE-2010-1647 on users?
The impact of CVE-2010-1647 can lead to session hijacking and unauthorized actions during user interaction with the compromised MediaWiki.