VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 11, 2013· Updated Jun 16, 2026

CVE-2013-4305

CVE-2013-4305

Description

Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • MediaWiki/Mediawiki3 versions
    cpe:2.3:a:mediawiki:mediawiki:1.19.7:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mediawiki:mediawiki:1.19.7:*:*:*:*:*:*:*
    • cpe:2.3:a:mediawiki:mediawiki:1.20.6:*:*:*:*:*:*:*
    • cpe:2.3:a:mediawiki:mediawiki:1.21.1:*:*:*:*:*:*:*
  • MediaWiki/SyntaxHighlight_GeSHillm-fuzzy

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.