Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2005-4501
4.3
MEDIUMCVSS v2
Published
December 22, 2005
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.3.13, = 1.2.4, = 1.3.12, = 1.4.1, = 1.4.8, = 1.4.9, = 1.4.3, = 1.3.5, = 1.3.6, = 1.1.0, = 1.2.1, = 1.3.0, = 1.4.2, = 1.2.2, = 1.3.10, = 1.3.4, = 1.4.5, = 1.4_beta3, = 1.4_beta4, <= 1.5.3, = 1.2.6, = 1.3, = 1.3.15, = 1.3.9, = 1.5_alpha2, = 1.2.5, = 1.4_beta6, = 1.2.0, = 1.3.1, = 1.3.2, = 1.3.3, = 1.4.10, = 1.4_beta1, = 1.4_beta2, = 1.5_beta1, = 1.5_beta2, = 1.2.3, = 1.3.11, = 1.3.14, = 1.3.8, = 1.5_alpha1, = 1.3.7, = 1.4.6, = 1.4.7, = 1.4_beta5NVD