CVE-2015-2939
EPSS 0.41%發布日:2015/4/13修改日:2026/4/28
描述
Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a function name, which is not properly handled in a Lua error backtrace.
受影響套件(1)
- Debian/mediawikifrom 0, < 1:1.19.20+dfsg-2.3