{"id":"CVE-2004-2185","details":"Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1) the UnicodeConverter extension, (2) raw page views, (3) SpecialIpblocklist, (4) SpecialEmailuser, (5) SpecialMaintenance, and (6) ImagePage.","modified":"2026-04-10T03:36:43.642729Z","published":"2004-12-31T05:00:00Z","references":[{"type":"FIX","url":"http://www.securityfocus.com/bid/11416"},{"type":"WEB","url":"http://sourceforge.net/project/shownotes.php?release_id=275099"}],"schema_version":"1.7.5"}