← Database

CVE-2009-4589

MEDIUM CVSS: 4.3 Published: 2010-01-07 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arbitrary web script or HTML via the ip parameter.

Affected Platforms

Mediawiki MediawikMediawiki Mediawiki

Weakness Type

CWE-79

References