CVE-2004-2152

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML.

Affected (13)

Products: Mediawiki: Mediawiki

Mediawiki

1 product

Mediawiki

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Version 1.1.0
Mediawiki Mediawiki	Version 1.2.0
Mediawiki Mediawiki	Version 1.2.1
Mediawiki Mediawiki	Version 1.2.2
Mediawiki Mediawiki	Version 1.2.3
Mediawiki Mediawiki	Version 1.2.4
Mediawiki Mediawiki	Version 1.2.5
Mediawiki Mediawiki	Version 1.2.6
Mediawiki Mediawiki	Version 1.3.0
Mediawiki Mediawiki	Version 1.3.1
Mediawiki Mediawiki	Version 1.3.2
Mediawiki Mediawiki	Version 1.3.3
Mediawiki Mediawiki	Version 1.3.4