CVE-2008-5551: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 14% chance of exploitation in the next 30 days.

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."

Affected products

• Microsoft Internet Explorer: version 8 only

Published 2008-12-12. Last modified 2026-06-16.