CVE-2008-0460
NoneCVSS
—
EPSS
14.6%
Published
Jan 25, 2008
CISA due date
—
The record
Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8; and (2) the BotQuery extension for MediaWiki 1.7 and earlier; when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | mediawiki | 0 | 1:1.11.1-1 |
| Debian:11 | mediawiki | 0 | 1:1.11.1-1 |
| Debian:12 | mediawiki | 0 | 1:1.11.1-1 |
| Debian:13 | mediawiki | 0 | 1:1.11.1-1 |
Related vulnerabilities
- CVE-2024-34506 An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before… Also affects mediawiki
- CVE-2014-1610 MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when… Also affects mediawiki
- CVE-2023-45361 An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in… Also affects mediawiki
- CVE-2023-45359 An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and… Also affects mediawiki
- CVE-2024-47913 An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x… Also affects mediawiki
- CVE-2024-34507 An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki… Also affects mediawiki
- CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96382 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79