CVE-2005-1888

Published: Jun 6, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.

Affected (20)

Products: Mediawiki: Mediawiki

Mediawiki

1 product

Mediawiki

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Version 1.3.10
Mediawiki Mediawiki	Version 1.3.11
Mediawiki Mediawiki	Version 1.3.1
Mediawiki Mediawiki	Version 1.3.2
Mediawiki Mediawiki	Version 1.3.3
Mediawiki Mediawiki	Version 1.3.4
Mediawiki Mediawiki	Version 1.3.5
Mediawiki Mediawiki	Version 1.3.6
Mediawiki Mediawiki	Version 1.3.7
Mediawiki Mediawiki	Version 1.3.8
Mediawiki Mediawiki	Version 1.3.9
Mediawiki Mediawiki	Version 1.3
Mediawiki Mediawiki	Version 1.4_beta1
Mediawiki Mediawiki	Version 1.4_beta2
Mediawiki Mediawiki	Version 1.4_beta3
Mediawiki Mediawiki	Version 1.4_beta4
Mediawiki Mediawiki	Version 1.4_beta5
Mediawiki Mediawiki	Version stable_2003-08-29
Mediawiki Mediawiki	Version stable_2003-11-07
Mediawiki Mediawiki	Version stable_2003-11-17