CVE-2005-4455

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-21 · updated 2026-06-16

Description

cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi.

Affected products

Livejournal: all versions

References

http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl
http://secunia.com/advisories/18157
http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl
http://secunia.com/advisories/18157

Get alerted when CVE-2005-4455 or the next vulnerability affects your stack