CVE-2005-3165

CVE-2005-3165

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.

EPSS 1.3% · Fix available

Published

2005-10-06T04:00:00.000Z

Updated

2024-09-17T01:31:24.015Z

Stack: system

Check your server →