CVE-2009-4589
Published: 7 January 2010
Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arbitrary web script or HTML via the ip parameter.
Notes
Author | Note |
---|---|
mdeslaur | Only versions 1.14.0, 1.15.0 and release candidates are affected |