Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T02:46:48.051Z
Reserved: 2010-07-22T00:00:00
Link: CVE-2010-2788

No data.

Status : Modified
Published: 2011-04-27T00:55:01.740
Modified: 2024-11-21T01:17:22.747
Link: CVE-2010-2788

No data.