Wikimedia Foundation · Mediawiki · CVE-2008-0460
**Name of the Vulnerable Software and Affected Versions**
MediaWiki versions 1.11.0rc1 and earlier, specifically versions 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8
MediaWiki BotQuery extension for MediaWiki 1.7 and earlier
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors when Internet Explorer is used.
**Recommendations**
For MediaWiki versions 1.11 through 1.11.0rc1, update to a version later than 1.11.0rc1.
For MediaWiki versions 1.10 through 1.10.2, update to a version later than 1.10.2.
For MediaWiki versions 1.9 through 1.9.4, update to a version later than 1.9.4.
For MediaWiki version 1.8, update to a version later than 1.8.
For the BotQuery extension in MediaWiki 1.7 and earlier, consider disabling the extension until a patch is available.