Description

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.

Remediation

References

CVE-2005-3165

Related Vulnerabilities

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.25)

WordPress Plugin Post Grid Gutenberg Blocks and WordPress Blog-PostX Multiple Vulnerabilities (2.4.9)

WordPress 5.4.x Prototype Pollution (5.4 - 5.4.9)

WordPress Plugin Arlo training and event management system Cross-Site Scripting (2.1.7.1)

Joomla! Core 1.6.x Cross-Site Scripting (1.6.0 - 1.6.6)

Severity

Medium

Classification

CVE-2005-3165

Tags

Missing Update Known Vulnerabilities