{"id":"CVE-2005-3165","details":"Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) \u003cmath\u003e tags or (2) Extension or \u003cnowiki\u003e sections that \"bypass HTML style attribute restrictions\" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.","modified":"2026-04-10T03:37:15.362604Z","published":"2005-10-06T10:02:00Z","references":[{"type":"ADVISORY","url":"http://lwn.net/Articles/153906/"},{"type":"ADVISORY","url":"http://secunia.com/advisories/16932"},{"type":"FIX","url":"http://secunia.com/advisories/16932"},{"type":"FIX","url":"http://sourceforge.net/project/shownotes.php?release_id=352777"}],"schema_version":"1.7.5"}