https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 04:53:05 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566 CERTFR-2015-AVI-566 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566 https://vulnerability.circl.lu/vuln/cnvd-2015-08496 cnvd-2015-08496 https://vulnerability.circl.lu/vuln/cnvd-2015-08496 https://vulnerability.circl.lu/vuln/fkie_cve-2015-8622 <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named &#34;javascript:alert(&#39;XSS!&#39;).&#34;</p> <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named &#34;javascript:alert(&#39;XSS!&#39;).&#34;</p> https://vulnerability.circl.lu/vuln/fkie_cve-2015-8622 https://vulnerability.circl.lu/vuln/ghsa-p8m9-vcch-wc8g <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named &#34;javascript:alert(&#39;XSS!&#39;).&#34;</p> <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named &#34;javascript:alert(&#39;XSS!&#39;).&#34;</p> https://vulnerability.circl.lu/vuln/ghsa-p8m9-vcch-wc8g https://vulnerability.circl.lu/vuln/gsd-2015-8622 gsd-2015-8622 https://vulnerability.circl.lu/vuln/gsd-2015-8622 https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8622 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mediawiki</p> <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named &#34;javascript:alert(&#39;XSS!&#39;).&#34;</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mediawiki</p> <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named &#34;javascript:alert(&#39;XSS!&#39;).&#34;</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8622