Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 22:09:09 +0000 certa-2011-avi-261 — Plusieurs vulnérabilités ont été corrigés avec la version 1.16.3 de MediaWiki. Deux d'entre-elles permettent de réalise… https://cve.radiocsirt.org/vuln/certa-2011-avi-261 certa-2011-avi-261 https://cve.radiocsirt.org/vuln/certa-2011-avi-261 EUVD-2026-114850 https://cve.radiocsirt.org/vuln/euvd-2026-114850 EUVD-2026-114850 https://cve.radiocsirt.org/vuln/euvd-2026-114850 fkie_cve-2011-1579 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1579 <p>The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using the \2f\2a and \2a\2f hex strings to surround CSS comments.</p> <p>The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using the \2f\2a and \2a\2f hex strings to surround CSS comments.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-1579 GHSA-rwjq-pqc6-6rcp https://cve.radiocsirt.org/vuln/ghsa-rwjq-pqc6-6rcp <p>The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using the \2f\2a and \2a\2f hex strings to surround CSS comments.</p> <p>The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using the \2f\2a and \2a\2f hex strings to surround CSS comments.</p> https://cve.radiocsirt.org/vuln/ghsa-rwjq-pqc6-6rcp gsd-2011-1579 https://cve.radiocsirt.org/vuln/gsd-2011-1579 gsd-2011-1579 https://cve.radiocsirt.org/vuln/gsd-2011-1579