CVE-2010-2788

Published Apr 27, 2011 CVSS 2.0 · 2.6 Low EPSS 1.6% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-2792 Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 2:46 AM
Reserved
Jul 22, 2010, 12:00 AM
Status
Modified
Published
Apr 27, 2011, 12:55 AM
Modified
Jun 16, 2026, 11:21 PM