Unrated severityNVD Advisory· Published Jan 25, 2008· Updated Jun 16, 2026
CVE-2008-0460
CVE-2008-0460
Description
Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8; and (2) the BotQuery extension for MediaWiki 1.7 and earlier; when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20cpe:2.3:a:mediawiki:mediawiki:1.10.0:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:mediawiki:mediawiki:1.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.11:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.11.0rc1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.9.4:*:*:*:*:*:*:*
- (no CPE)range: 1.8 - 1.11.0rc1
- cpe:2.3:a:mediawiki:mediawiki_botquery_ext:*:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/28629nvdVendor Advisory
- lists.wikimedia.org/pipermail/mediawiki-announce/2008-January/000068.htmlnvd
- secunia.com/advisories/29266nvd
- www.securityfocus.com/bid/28137nvd
- www.vupen.com/english/advisories/2008/0280nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39901nvd
- www.redhat.com/archives/fedora-package-announce/2008-March/msg00147.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2008-March/msg00189.htmlnvd
News mentions
0No linked articles in our index yet.