NetSight
IP …
medium4.3

CVE-2005-1888

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.

Impact

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.

Affected products

VendorProductAffected versions
MediawikiMediawiki
Versions 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5

References