Description

Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

Remediation

References

CVE-2005-3167

Related Vulnerabilities

WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator SQL Injection (4.4.2)

WordPress Plugin Locatoraid Store Locator Cross-Site Request Forgery (3.9.11)

Moodle Incorrect Authorization Vulnerability (CVE-2022-0984)

WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.3.8)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20351)

Severity

Medium

Classification

CVE-2005-3167

Tags

Missing Update Known Vulnerabilities