Lucene search

K
cvelistRedhatCVELIST:CVE-2011-1579
HistoryApr 27, 2011 - 12:00 a.m.

CVE-2011-1579

2011-04-2700:00:00
redhat
raw.githubusercontent.com
1

5.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using the \2f\2a and \2a\2f hex strings to surround CSS comments.

5.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%