CVE-2013-6451

MEDIUMCVSS 6.1
6.1CVSS
EchelonGraph verdictMonitorLow exploitation likelihood right now — keep watching.
  • Lower severity and no public exploit yet
CISA-KEV: Not listedEPSS PROB: —CVSS: 6.1Exploit: None knownExposed services: —

Fix status could not be loaded just now — check the vendor's advisory; until a fix is applied, use a compensating control (WAF / firewall / segmentation).

Cross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via unspecified CSS values.

Internet exposure

The internet-exposure footprint is temporarily unavailable — the KEV-Exposure radar's record for this CVE could not be loaded just now. That is not a finding of zero exposed services; please retry shortly.

CVSS v3
6.1
EchelonGraph score
Not yet assessedEchelonGraph has no severity assessment for this CVE yet. This is not a rating of zero.
EG Score
—
EG Risk
—
EPSS PROB
—
EPSS %ILE
—
KEV
Not listed

Published

January 28, 2020

Last Modified

June 17, 2026

Advisory Details

Enriched advisory details are temporarily unavailable — they could not be loaded just now. That is not a sign that none exist; please retry shortly.

References (2)

Vendor Advisories for CVE-2013-6451

Vendor advisories for this CVE are temporarily unavailable — the list could not be loaded just now. That is not a sign that none exist; please retry shortly.

Weakness Classification(1)

MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.

Related CVEs(same product + same CWE)· as of October 4, 2026

Frequently asked(4)

What is CVE-2013-6451?
CVE-2013-6451 is a medium vulnerability published on January 28, 2020. Cross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via unspecified CSS values.
When was CVE-2013-6451 disclosed?
CVE-2013-6451 was first published on January 28, 2020, with the most recent update on June 17, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.
What is the CVSS score of CVE-2013-6451?
CVE-2013-6451 has a CVSS base score of 6.1.
How do I remediate CVE-2013-6451?
EchelonGraph could not load the fix status for CVE-2013-6451 just now. Check the vendor's advisory for a fixed version; if none is published, restrict network exposure of the affected system or apply the vendor's mitigation until one is.

Dependency Blast Radius

Explore the affected products and dependency analysis for CVE-2013-6451

Explore →

Is Your Infrastructure Affected by CVE-2013-6451?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Book a Demo →Browse All CVEs