Author: david.pavey
Description:
If you enter:
<script>alert("CSS Vulnerability");</script>
into the query window and click on the 'Find results' button, it will pop up an alert window the the 'CSS Vulnerability' message.
This works on all versions of Media wiki and the semantic extensions I have tried.
Works in both Firefox and IE.
Version: unspecified
Severity: major
URL: http://semantic-mediawiki.org/wiki/Special:Ask