CVE-2013-4568 in MediaWiki
Summary
Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain non-ASCII characters in CSS, as demonstrated using variations of "expression" containing (1) full width characters or (2) IPA extensions, which are converted and rendered by Internet Explorer.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
06/12/2013
Disclosure
12/13/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65745 | MediaWiki checkCss incomplete blacklist | 184 | Not defined | Official fix | CVE-2013-4568 |