CVE-2005-1245

Published: May 2, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected (17)

Products: Mediawiki: Mediawiki

Mediawiki

1 product

Mediawiki

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Version 1.3.10
Mediawiki Mediawiki	Version 1.3.11
Mediawiki Mediawiki	Version 1.3.1
Mediawiki Mediawiki	Version 1.3.2
Mediawiki Mediawiki	Version 1.3.3
Mediawiki Mediawiki	Version 1.3.4
Mediawiki Mediawiki	Version 1.3.5
Mediawiki Mediawiki	Version 1.3.6
Mediawiki Mediawiki	Version 1.3.7
Mediawiki Mediawiki	Version 1.3.8
Mediawiki Mediawiki	Version 1.3.9
Mediawiki Mediawiki	Version 1.3
Mediawiki Mediawiki	Version 1.4_beta1
Mediawiki Mediawiki	Version 1.4_beta2
Mediawiki Mediawiki	Version 1.4_beta3
Mediawiki Mediawiki	Version 1.4_beta4
Mediawiki Mediawiki	Version 1.4_beta5