CVE-2005-4455: Livejournal

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi.

Affected products

• Livejournal Livejournal: any version

Published 2005-12-21. Last modified 2026-06-16.