CVE-2007-1055
EPSS 2.0%
Description
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177.
How to fix CVE-2007-1055
To remediate CVE-2007-1055, upgrade the affected package to a fixed version below.
- Debian/mediawiki—upgrade to 1.7.1-9 or later
Is CVE-2007-1055 being exploited?
Low — EPSS is 2.0%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1.7.1-9