Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mediawiki@1.7.1-9?distro=trixie
purl pkg:deb/debian/mediawiki@1.7.1-9?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-ahev-x89y-9fdp Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177. CVE-2007-1055
VCID-g5sv-bc5q-1kga Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer. CVE-2007-1054

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-02T01:31:48.985095+00:00 Debian Importer Fixing VCID-g5sv-bc5q-1kga https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-01T23:55:02.946538+00:00 Debian Importer Fixing VCID-ahev-x89y-9fdp https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-04-16T10:17:03.604472+00:00 Debian Importer Fixing VCID-g5sv-bc5q-1kga https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:34:45.154940+00:00 Debian Importer Fixing VCID-ahev-x89y-9fdp https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-12T18:14:21.178699+00:00 Debian Importer Fixing VCID-g5sv-bc5q-1kga https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:22:53.001356+00:00 Debian Importer Fixing VCID-ahev-x89y-9fdp https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:45:40.536066+00:00 Debian Importer Fixing VCID-ahev-x89y-9fdp https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:40.480067+00:00 Debian Importer Fixing VCID-g5sv-bc5q-1kga https://security-tracker.debian.org/tracker/data/json 38.1.0