Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain non-ASCII characters in CSS
Reporter | Title | Published | Views | Family All 35 |
---|---|---|---|---|
![]() | Cross site scripting | 13 Dec 201318:07 | – | prion |
![]() | CVE-2013-4568 | 13 Dec 201318:07 | – | nvd |
![]() | CVE-2013-4568 | 13 Dec 201300:00 | – | ubuntucve |
![]() | CVE-2013-4568 | 13 Dec 201318:00 | – | cvelist |
![]() | CVE-2013-4568 | 13 Dec 201318:07 | – | debiancve |
![]() | Updated mediawiki packages fix security vulnerabilities | 13 Dec 201302:21 | – | mageia |
![]() | Updated mediawiki packages fix security vulnerabilities | 3 Mar 201400:53 | – | mageia |
![]() | [ MDVSA-2013:290 ] mediawiki | 9 Jan 201400:00 | – | securityvulns |
![]() | [ MDVSA-2014:057 ] mediawiki | 5 May 201400:00 | – | securityvulns |
![]() | Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | 9 Jan 201400:00 | – | securityvulns |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo