mediawiki

• Author: kikadf
• Vulnerable: 1.19.16-1arcturus1
• Unaffected: 1.19.18-1arcturus1

It was discovered that MediaWiki, a website engine for collaborative work, is vulnerable to JSONP injection in Flash (CVE-2014-5241) and clickjacking between OutputPage and ParserOutput (CVE-2014-5243).

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5241
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5243