VDB

GCVE-VVD-MAGEIA-2014-400

GCVE-VVD-MAGEIA-2014-400
Advisory Published
Vulnetix · Advisory published October 7, 2014
Updated mediawiki packages fix security vulnerability: MediaWiki before 1.23.4 is vulnerable to cross-site scripting due to JavaScript injection via CSS in uploaded SVG files (CVE-2014-7199). MediaWiki before 1.23.5 is vulnerable to cross-site scripting due to JavaScript injection via user-specificed CSS in certain special pages (CVE-2014-7295).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiamediawiki0 (affected), 1.23.5-1.mga3 (unaffected)—
Mageiamediawiki0 (affected), 1.23.5-1.mga4 (unaffected)—

Aliases

CVE-2014-7199CVE-2014-7295

Transitive aliases

GSD-2014-7295GHSA-5h2x-38g7-phqvGSD-2014-7199GHSA-ch24-8hv8-9rmv

References

Updated mediawiki packages fix security vulnerbilities
advisory
Updated mediawiki packages fix security vulnerbilities
issue
Updated mediawiki packages fix security vulnerbilities
issue
Updated mediawiki packages fix security vulnerbilities
issue
Updated mediawiki packages fix security vulnerbilities
advisory
Updated mediawiki packages fix security vulnerbilities
advisory

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›