CVE-2014-5243

MEDIUM · CVSS 4.3 EPSS 1.77%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-08-22 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-5243

Severity

MEDIUM

CVSS

4.3

EPSS

1.77%

Original Filing — NVD Description

MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.