NVD

Id
85176  
Name
CVE-2016-6333  
Description
Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-04-27  
Published
2017-04-20  
Modified Date
2017-04-24  
Seq
2016-6333  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415160 85176 CVE-2014-9835 [oss-security] 20141224 Imagemagick fuzzing bug  View
415161 85176 CVE-2014-9835 [oss-security] 20160602 Re: ImageMagick CVEs  View
415162 85176 CVE-2014-9835 [oss-security] 20141224 Imagemagick fuzzing bug  View
415163 85176 CVE-2014-9835 [oss-security] 20160602 Re: ImageMagick CVEs  View
418147 85176 CVE-2017-3513 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418148 85176 CVE-2017-3513 97736  View
418149 85176 CVE-2017-3513 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418150 85176 CVE-2017-3513 97736  View

Related JVN