CVE-2008-5551

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-12 · updated 2026-06-16
Weakness: CWE-79

Description

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."

Affected products

Microsoft Internet Explorer 11: 8-beta2

References

http://securityreason.com/securityalert/4724
http://www.securityfocus.com/archive/1/499124/100/0/threaded
http://www.securityfocus.com/bid/32780
https://exchange.xforce.ibmcloud.com/vulnerabilities/47277
http://securityreason.com/securityalert/4724
http://www.securityfocus.com/archive/1/499124/100/0/threaded
http://www.securityfocus.com/bid/32780
https://exchange.xforce.ibmcloud.com/vulnerabilities/47277

Get alerted when CVE-2008-5551 or the next vulnerability affects your stack