CVE-2005-1245

Published Apr 24, 2005 CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2005-1248 Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:44 PM
Reserved
Apr 24, 2005, 12:00 AM
Status
Modified
Published
May 2, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:12 PM