Versions 1.4.6 and 1.5 beta 3 of MediaWiki have been released, they address a security issue. "Incorrect escaping of a parameter in the page move template could be used to inject JavaScript code by getting a victim to visit a maliciously constructed URL. Users of vulnerable releases are recommended to upgrade to this release."

---

to post comments