CVE-2010-2788
Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web scri…
Published: 2011-04-27 · CVSS: Unscored
Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7