CVE-2007-4828

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-12 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Wikimedia Foundation MediaWiki: 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.0 (+6)

References

http://fedoranews.org/updates/FEDORA-2007-218.shtml
http://lists.wikimedia.org/pipermail/mediawiki-announce/2007-September/000067.html
http://secunia.com/advisories/26772
http://secunia.com/advisories/26870
http://www.securityfocus.com/bid/25632
http://www.vupen.com/english/advisories/2007/3130
https://bugzilla.redhat.com/show_bug.cgi?id=287881
https://exchange.xforce.ibmcloud.com/vulnerabilities/36558
http://fedoranews.org/updates/FEDORA-2007-218.shtml
http://lists.wikimedia.org/pipermail/mediawiki-announce/2007-September/000067.html
http://secunia.com/advisories/26772
http://secunia.com/advisories/26870

Get alerted when CVE-2007-4828 or the next vulnerability affects your stack