VULNERABILITY INTELLIGENCE

CVE-2005-4455

CVSS score5 MEDIUM
EPSS probability1.04%
CISA KEVNot currently listed
Published2005-12-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi.

Primary references