CVEvulnerability
CVE-2011-0047
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-02-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) comments, aka "CSS injection vulnerability."
Affected configurations
• mediawiki mediawiki (<= 1.16.1)
• mediawiki mediawiki 1.1.0
• mediawiki mediawiki 1.2.0
• mediawiki mediawiki 1.2.1
• mediawiki mediawiki 1.2.2
• mediawiki mediawiki 1.2.3
• mediawiki mediawiki 1.2.4
• mediawiki mediawiki 1.2.5
• mediawiki mediawiki 1.2.6
• mediawiki mediawiki 1.3
• mediawiki mediawiki 1.3.0
• mediawiki mediawiki 1.3.1
• mediawiki mediawiki 1.3.2
• mediawiki mediawiki 1.3.3
• mediawiki mediawiki 1.3.4
• mediawiki mediawiki 1.3.5
• mediawiki mediawiki 1.3.6
• mediawiki mediawiki 1.3.7
• mediawiki mediawiki 1.3.8
• mediawiki mediawiki 1.3.9
• mediawiki mediawiki 1.3.10
• mediawiki mediawiki 1.3.11
• mediawiki mediawiki 1.3.12
• mediawiki mediawiki 1.3.13
• mediawiki mediawiki 1.3.14
• mediawiki mediawiki 1.3.15
• mediawiki mediawiki 1.4
• mediawiki mediawiki 1.4.0
• mediawiki mediawiki 1.4.1
• mediawiki mediawiki 1.4.2
• mediawiki mediawiki 1.4.3
• mediawiki mediawiki 1.4.4
• mediawiki mediawiki 1.4.5
• mediawiki mediawiki 1.4.6
• mediawiki mediawiki 1.4.7
• mediawiki mediawiki 1.4.8
• mediawiki mediawiki 1.4.9
• mediawiki mediawiki 1.4.10
• mediawiki mediawiki 1.4.11
• mediawiki mediawiki 1.4.12
• mediawiki mediawiki 1.4.13
• mediawiki mediawiki 1.4.14
• mediawiki mediawiki 1.5
• mediawiki mediawiki 1.5.0
• mediawiki mediawiki 1.5.1
• mediawiki mediawiki 1.5.2
• mediawiki mediawiki 1.5.3
• mediawiki mediawiki 1.5.4
• mediawiki mediawiki 1.5.5
• mediawiki mediawiki 1.5.6
• mediawiki mediawiki 1.5.7
• mediawiki mediawiki 1.5.8
• mediawiki mediawiki 1.6.0
• mediawiki mediawiki 1.6.1
• mediawiki mediawiki 1.6.2
• mediawiki mediawiki 1.6.3
• mediawiki mediawiki 1.6.4
• mediawiki mediawiki 1.6.5
• mediawiki mediawiki 1.6.5 r14348
• mediawiki mediawiki 1.6.6
… and 51 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html lists.fedoraproject.org
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-February/000095.html Patch, Vendor Advisory
- http://osvdb.org/70770 osvdb.org
- http://secunia.com/advisories/43142 Vendor Advisory
- http://www.securityfocus.com/bid/46108 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0273 Vendor Advisory
- https://bugzilla.wikimedia.org/show_bug.cgi?id=27093 bugzilla.wikimedia.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65126 exchange.xforce.ibmcloud.com
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html lists.fedoraproject.org
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-February/000095.html Patch, Vendor Advisory
- http://osvdb.org/70770 osvdb.org
- http://secunia.com/advisories/43142 Vendor Advisory
- http://www.securityfocus.com/bid/46108 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0273 Vendor Advisory
- https://bugzilla.wikimedia.org/show_bug.cgi?id=27093 bugzilla.wikimedia.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65126 exchange.xforce.ibmcloud.com