CVE-2017-8811

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.27.4 MediaWiki versions 1.28.x prior to 1.28.3 MediaWiki versions 1.29.x prior to 1.29.2

Description The issue affects the implementation of raw message parameter expansion, allowing HTML mangling attacks.

Recommendations For versions prior to 1.27.4, update to version 1.27.4 or later. For versions 1.28.x prior to 1.28.3, update to version 1.28.3 or later. For versions 1.29.x prior to 1.29.2, update to version 1.29.2 or later.