CVE-2012-6453

EUVD-2012-6306
Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
mediawikirssreader
𝑥
≤ 0.2.5
mediawikirssreader
0.2
mediawikirssreader
0.2.1
mediawikirssreader
0.2.2
mediawikirssreader
0.2.3
mediawikirssreader
0.2.4
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mediawiki-extensions
hardy
ignored
lucid
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
not-affected
saucy
not-affected
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
dne
yakkety
dne
zesty
dne
Common Weakness Enumeration
References
http://bugs.debian.org/696179
http://www.mediawiki.org/wiki/Extension:RSS_Reader#0.2.6
http://bugs.debian.org/696179
http://www.mediawiki.org/wiki/Extension:RSS_Reader#0.2.6