VULNERABILITY INTELLIGENCE

CVE-2005-4501

CVSS score4.3 MEDIUM
EPSS probability1.44%
CISA KEVNot currently listed
Published2005-12-22
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer.

Primary references