mediawiki-extensions vulnerabilities (Debian)

12 vulnerabilities.

• mediawiki-extensions Debian includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before... CVE-2014-2665 Fix available 4.0 MediumMarch 30, 2014
• mediawiki-extensions Debian Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1... CVE-2013-6454 Fix available 4.3 MediumMarch 30, 2014
• mediawiki-extensions Debian MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to... CVE-2013-6472 Fix available 5.0 MediumMarch 2, 2014
• mediawiki-extensions Debian MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize... CVE-2013-6453 Fix available 7.5 HighMarch 2, 2014
• mediawiki-extensions Debian Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1... CVE-2013-6452 Fix available 4.3 MediumMarch 2, 2014
• mediawiki-extensions Debian MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF... CVE-2014-1610 Public exploitFix available EPSS 42.8% 6.0 MediumJanuary 30, 2014
• mediawiki-extensions Debian The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before... CVE-2013-4572 Fix available 7.5 HighDecember 12, 2013
• mediawiki-extensions Debian Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x... CVE-2013-4568 Fix available 4.3 MediumDecember 12, 2013
• mediawiki-extensions Debian Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x... CVE-2013-4567 Fix available 4.3 MediumDecember 12, 2013
• mediawiki-extensions Debian MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password... CVE-2013-2032 Fix available 5.0 MediumNovember 15, 2013
• mediawiki-extensions Debian MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site... CVE-2013-2031 Fix available 4.3 MediumNovember 15, 2013
• mediawiki-extensions Debian Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki... CVE-2012-6453 Fix available 4.3 MediumDecember 30, 2012