CVE-2013-4567: XSS
Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via a \b (backspace) character in CSS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4567?
The severity of CVE-2013-4567 is considered moderate due to its potential to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2013-4567?
To fix CVE-2013-4567, upgrade MediaWiki to version 1.19.9, 1.20.8, 1.21.3 or later.
What versions of MediaWiki are affected by CVE-2013-4567?
CVE-2013-4567 affects MediaWiki versions prior to 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3.
What type of vulnerability is CVE-2013-4567?
CVE-2013-4567 is an incomplete blacklist vulnerability that allows for cross-site scripting (XSS) attacks.
Is CVE-2013-4567 being actively exploited?
There are no known active exploits for CVE-2013-4567, but it is recommended to update affected systems to mitigate risk.