CVE-2015-2941
Status: ModifiedMedium (4.3)—
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to inject arbitrary web script or HTML via an invalid parameter in a wddx format request to api.php, which is not properly handled in an error message, related to unsafe calls to wddx_serialize_value.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Base score: 4.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.10%
- Percentile among all scored CVEs: 81
- Score date: 10/8/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-79
References
- http://www.openwall.com/lists/oss-security/2015/04/01/1
- http://www.openwall.com/lists/oss-security/2015/04/07/3
- http://www.securityfocus.com/bid/73477
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
- https://phabricator.wikimedia.org/T85851
- https://security.gentoo.org/glsa/201510-05
- http://www.openwall.com/lists/oss-security/2015/04/01/1
- http://www.openwall.com/lists/oss-security/2015/04/07/3
- http://www.securityfocus.com/bid/73477
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
- https://phabricator.wikimedia.org/T85851
- https://security.gentoo.org/glsa/201510-05
Raw JSON (NVD)
Show
{
"id": "CVE-2015-2941",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2015-04-13T14:59:14.460",
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2015/04/01/1",
"source": "cve@mitre.org"
},
{
"url": "http://www.openwall.com/lists/oss-security/2015/04/07/3",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/73477",
"source": "cve@mitre.org"
},
{
"url": "https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://phabricator.wikimedia.org/T85851",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://security.gentoo.org/glsa/201510-05",
"source": "cve@mitre.org"
},
{
"url": "http://www.openwall.com/lists/oss-security/2015/04/01/1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2015/04/07/3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/73477",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://phabricator.wikimedia.org/T85851",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security.gentoo.org/glsa/201510-05",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to inject arbitrary web script or HTML via an invalid parameter in a wddx format request to api.php, which is not properly handled in an error message, related to unsafe calls to wddx_serialize_value."
},
{
"lang": "es",
"value": "Vulnerabilidad de XSS en MediaWiki anterior a 1.19.24, 1.2x anterior a 1.23.9 y 1.24.x anterior a 1.24.2, cuando se utiliza HHVM, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un parametro inválido en una petición con formato wddx hacia api.php, lo cual no se maneja debidamente en un mensaje de error, relacionado con llamadas no seguras hacia wddx_serialize_value."
}
],
"lastModified": "2026-06-17T00:25:00.620",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5069E3E0-7640-4FA3-8C6F-BA96AFC545EE",
"versionEndIncluding": "1.19.23"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FA45494-185A-4ED1-8818-D9F14EB9B59B"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59319309-D926-4353-8E0C-1FE0CB97E4D5"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA15B197-EC42-49F0-8764-E315CDA7EA03"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECD4CD3D-6022-4F75-A524-5A5247EF23AD"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75B95AE3-6FA0-44BD-A78A-F059613B57EC"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94646567-FF30-4FBA-96C5-914EB3C85D7F"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF088531-6875-49A2-B220-D7EC38ECC50F"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "902A7EE8-90AA-4B0D-9142-DFCDA5AC8914"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.20.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B6CD057-EBC4-4909-9734-80577AFDED40"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "383CE1D8-7A58-4C24-8898-8C592F98EFCC"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DA12531-818E-4AD7-A3E7-467604775416"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E87AB00-90DD-4548-B23A-42673DDFD1D1"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01D8F235-2F1B-4198-A91E-B2723293AA36"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2A5F4A7-40E7-42D0-8482-647D0EC54AC7"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E10A8FAC-7506-48B8-A4EE-B7A1BE20537E"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EF797B5-8348-481C-AB6F-154DEA0E5281"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E627F80-E6AA-4627-B58E-D6B2A08269BB"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA54E0F2-3B21-469F-A3FB-8E41E1857447"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09CFF4B5-5827-4795-960A-201BA1BCF1A2"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC9D6B62-13CD-4307-94BB-A7210761A4D1"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.21.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32C36F51-CCCC-41D1-A43B-B8F77CE632B6"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB117E2F-D4CD-4CED-BCEF-3C821A431F6A"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B461B44C-37D2-480B-9645-B7E8720416C3"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E491E3AD-0FB2-41CD-B852-CAFCA397A45A"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBD50108-A301-4B5B-9047-6FD6792442B1"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91BBFEC5-A933-4178-919D-9AC87CF76D21"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD3CA0EC-1AC1-48A1-8BB8-95DCCE1C283A"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9343410C-E076-4362-8094-5BA5582E9675"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F96BBB28-AB3C-4082-B035-8CCB761C2530"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7389C3B9-B32D-46CC-8615-22CF7BDCD829"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "179FC802-541F-40EE-BB76-A4B745A9EA7C"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3332E0EC-49D6-4EB2-8A2E-CC204EA1C475"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E59021C-8DDF-4849-9490-AD8F98B834BA"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64E90FCD-B032-4BD8-84D6-763E0FDB48B0"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21A92544-BEA9-436F-BC22-CC90808D53F8"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61DB10EA-CA68-40BE-862D-0B351456F02E"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.22.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97675F56-1442-460D-842C-755304D69217"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6044842D-0C23-4683-9BCC-9FE40AE8353F"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BFCBB5A-F5F8-400E-916A-EB87F84853D9"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2898DFC3-7C3A-4C12-A3D2-4CEB3C66C90D"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04082771-E3E2-49EE-8840-0170F3B3519F"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC9B27B7-7800-4E35-97CA-B16450EEC478"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BEA6C00-BDCF-439C-8A04-B581361781EC"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90B931CC-CEA7-4C14-875E-A0D215CE5617"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FE300CC-68D6-46C7-8CC0-605F94FFC327"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.23.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "764ECEE9-EFB6-4C52-84E6-0F6827CF5DAE"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B21EB21-AE87-48BF-B4A1-5E63A2E116B4"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6C00423-B3FE-485A-9014-22F409DBD377"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}