Description

The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using the \2f\2a and \2a\2f hex strings to surround CSS comments.

Remediation

References

CVE-2011-1579

Related Vulnerabilities

WordPress Plugin WP People 'wp-people-popup.php' SQL Injection (2.0)

phpBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-7143)

WordPress Plugin SE HTML5 Album Audio Player Directory Traversal (1.1.0)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3393)

Mailman Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-42097)

Severity

Medium

Classification

CVE-2011-1579 CWE-20

Tags

Missing Update Known Vulnerabilities