CVE-2011-0047

Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) comments, aka "CSS injection vulnerability."

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/65126

https://bugzilla.wikimedia.org/show_bug.cgi?id=27093

http://www.vupen.com/english/advisories/2011/0273

http://www.securityfocus.com/bid/46108

http://secunia.com/advisories/43142

http://osvdb.org/70770

http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-February/000095.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3