GLSA-200506-12 : MediaWiki: XSS vulnerability
Low Nessus Plugin ID 18481
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-200506-12 (MediaWiki: XSS vulnerability)
MediaWiki incorrectly handles page template inclusions, rendering it vulnerable to cross-site scripting attacks.
A remote attacker could exploit this vulnerability to inject malicious script code that will be executed in a user's browser session in the context of the vulnerable site.
There is no known workaround at this time.
SolutionAll MediaWiki users should upgrade to the latest available versions:
# emerge --sync # emerge --ask --oneshot --verbose www-apps/mediawiki