Cross-site scripting (XSS) vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier before SVN 20070910 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a similar issue to CVE-2007-4828.
| Software | From | Fixed in |
|---|---|---|
| mediawiki / mediawiki | 1.7.3 | 1.7.3.x |
| mediawiki / mediawiki | 1.7.1 | 1.7.1.x |
| mediawiki / mediawiki | 1.7.0 | 1.7.0.x |
| mediawiki / mediawiki | 1.7.2 | 1.7.2.x |