Unrated severityNVD Advisory· Published Apr 13, 2015· Updated Jun 17, 2026
CVE-2015-2939
CVE-2015-2939
Description
Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a function name, which is not properly handled in a Lua error backtrace.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
7- lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.htmlnvdPatchVendor Advisory
- www.mandriva.com/security/advisoriesnvd
- www.openwall.com/lists/oss-security/2015/04/01/1nvd
- www.openwall.com/lists/oss-security/2015/04/07/3nvd
- www.securityfocus.com/bid/73477nvd
- phabricator.wikimedia.org/T85113nvd
- security.gentoo.org/glsa/201510-05nvd
News mentions
0No linked articles in our index yet.