CVE-2015-6730

Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to…

published September 1, 2015

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter, which is not properly handled in an error page, related to "ForeignAPI images."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02009 · 80.7th percentile
Published
2015-09-01T14:00Z
EPSS history
Timeline
  • 01 SEP 14:00Z
    Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to…
    cvelistv5