CVE-2015-2932
EPSS 0.28%Published: 4/13/2015Modified: 4/28/2026
Also known as:DEBIAN-CVE-2015-2932
Description
Incomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an animated href XLink element.
Affected packages (1)
- Debian/mediawikifrom 0, < 1:1.19.20+dfsg-2.3