CVE-2005-4455

high

Description

cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi.

References

http://secunia.com/advisories/18157

http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl

Details

Source: Mitre, NVD

Published: 2005-12-21

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 8.2

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Severity: High

EPSS

EPSS: 0.00336

Detections

Analytics