← Database

CVE-2005-4501

MEDIUM CVSS: 4.3 Published: 2005-12-22 Modified: 2026-06-16

Description

MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer.

Affected Platforms

Mediawiki Mediawiki

Weakness Type

NVD-CWE-Other

References