CVE-2005-1888 — Cross-site Scripting in Mediawiki

8 documents4 sources

Severity

4.3MEDIUMNVD

EPSS

0.4%

top 41.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mediawiki Debian Mediawiki

Timeline

PublishedJun 6

Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/mediawiki< mediawiki 1.4.9 (bookworm)

▶Debianmediawiki/mediawiki< 1.4.9+3

▶NVDmediawiki/mediawiki29 versions+28

Patches

Patch: sourceforge.net ↗Patch: www.securityfocus.com ↗Patch: sourceforge.net ↗

🔴Vulnerability Details

GHSA

GHSA-v2mr-w6wh-43qf: Cross-site scripting (XSS) vulnerability in MediaWiki before 1↗2022-05-01

▶

GHSA

GHSA-fjxw-77h7-chv3: Cross-site scripting (XSS) vulnerability in MediaWiki before 1↗2022-05-01

▶

OSV

CVE-2005-2215: Cross-site scripting (XSS) vulnerability in MediaWiki before 1↗2005-07-12

▶

OSV

CVE-2005-1888: Cross-site scripting (XSS) vulnerability in MediaWiki before 1↗2005-06-06

▶

📋Vendor Advisories

Debian

CVE-2005-1888: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote...↗2005

▶

Debian

CVE-2005-2215: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 ...↗2005

▶