Description

Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via a \b (backspace) character in CSS.

Remediation

References

CVE-2013-4567

Related Vulnerabilities

WordPress Plugin Stylish Cost Calculator Cross-Site Scripting (7.0.3)

WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.5.1)

phpMyAdmin Resource Management Errors Vulnerability (CVE-2014-9218)

Piwigo Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3790)

MySQL CVE-2022-21309 Vulnerability (CVE-2022-21309)

Severity

Medium

Classification

CVE-2013-4567

Tags

Missing Update Known Vulnerabilities