CVE-2006-2895: Mediawiki

Low severity, CVSS 2.6. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form.

Affected products

• Mediawiki Mediawiki: version 1.6.0 only; version 1.6.1 only; version 1.6.2 only; version 1.6.3 only; version 1.6.4 only; version 1.6.5 only; …

Published 2006-06-07. Last modified 2026-06-16.