CVE-2008-4408

EPSS 0.69%

mediawiki - cross site scripting

Published: 10/3/2008Modified: 3/9/2026

Also known as:DEBIAN-CVE-2008-4408DTSA-171-1

Description

Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions before 1.13.2 allows remote attackers to inject arbitrary web script or HTML via the useskin parameter to an unspecified component.

Affected packages (2)

Debian/mediawikifrom 0, < 1:1.13.2-1
Debian/mediawikifrom 0, < 1.12.0-2lenny1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-4408