CVE-2007-4883

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-14 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier before SVN 20070910 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a similar issue to CVE-2007-4828.

Affected products

Wikimedia Foundation MediaWiki: 1.7.0, 1.7.1, 1.7.2, 1.7.3

References

http://lists.wikimedia.org/pipermail/mediawiki-announce/2007-September/000067.html
http://osvdb.org/37336
http://lists.wikimedia.org/pipermail/mediawiki-announce/2007-September/000067.html
http://osvdb.org/37336

Get alerted when CVE-2007-4883 or the next vulnerability affects your stack