TI-2015-08001 Aliases CVE-2015-10073 GHSA-84mm-prjg-49xm

tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scripting

MEDIUM 43CWE-79Published 2023-02-06 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-79.

Summary

A vulnerability, which was classified as problematic, was found in tinymighty WikiSEO 1.2.1 on MediaWiki. This affects the function modifyHTML of the file WikiSEO.body.php of the component Meta Property Tag Handler. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.2.2 is able to address this issue. The patch is named 089a5797be612b18a820f9f1e6593ad9a91b1dba. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220215.

Why it matters now

EPSS 0.00883 59th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed tinymighty/wiki-seo (Packagist): 1.2.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
tinymighty	WikiSEO	1.2.1	—	No fix listed	CNA
—	tinymighty/wiki-seo (Packagist)	before 1.2.2	1.2.2	Patch available	GHSA-84mm-prjg-49xm

WikiSEO Vendortinymighty Affected 1.2.1 Fixed in — No fix listed CNA
tinymighty/wiki-seo (Packagist) Vendor— Affected before 1.2.2 Fixed in 1.2.2 Patch available GHSA-84mm-prjg-49xm

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:tinymighty:wikiseo:1.2.1:::::mediawiki::	1.2.1	Vulnerable	tinymighty

cpe:2.3:a:tinymighty:wikiseo:1.2.1:*:*:*:*:mediawiki:*:* Versions 1.2.1 Vulnerable ·tinymighty

Remediation

Fix · GHSA-84mm-prjg-49xm tinymighty/wiki-seo (Packagist) Fixed in 1.2.2 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2015-10073
2026-10-03 Alias added: GHSA-84mm-prjg-49xm

References

Exploit 1

https://github.com/tinymighty/wiki-seo/pull/21

Patch 2

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2015-10073

Other 1

https://github.com/tinymighty/wiki-seo

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences