AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-7295

LOW · CVSS 3.5 EPSS 1.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-10-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-7295
Severity
LOW
CVSS
3.5
EPSS
1.57%

Original NVD Description

The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x before 1.22.12 and 1.23.x before 1.23.5 allows remote authenticated users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via crafted CSS, as demonstrated by modifying MediaWiki:Common.css.