CVE-2012-1582
EPSS 0.64%Published: 9/9/2012Modified: 4/28/2026
Also known as:DEBIAN-CVE-2012-1582
Description
Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension.
Affected packages (1)
- Debian/mediawikifrom 0, < 1:1.15.5-9