NetSight
IP …
medium4.7

CVE-2017-0365

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations.

Impact

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations.

Affected products

VendorProductAffected versions
MediawikiMediawiki
from 1.23.0 through 1.23.16
from 1.27.0 before 1.27.2
from 1.28.0 before 1.28.1
DebianDebian Linux
Version 7.0

Weakness classification

CWE-79

References