CVE-2015-6730: XSS
Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter, which is not properly handled in an error page, related to "ForeignAPI images."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6730?
CVE-2015-6730 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2015-6730?
To fix CVE-2015-6730, upgrade MediaWiki to a version that is 1.23.10 or later, 1.24.3 or later, or 1.25.2 or later.
What software versions are affected by CVE-2015-6730?
CVE-2015-6730 affects MediaWiki versions prior to 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2.
What does the CVE-2015-6730 vulnerability allow attackers to do?
CVE-2015-6730 allows remote attackers to inject arbitrary web script or HTML via the f parameter in the thumb.php file.
What areas of MediaWiki are impacted by CVE-2015-6730?
CVE-2015-6730 specifically impacts error handling related to 'ForeignAPI images' in MediaWiki.