CVE-2010-4734
Last modified
CVE-2010-4734 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters. NOTE: some of these details are obtained from third party information.. EPSS estimates a 1.78% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters. NOTE: some of these details are obtained from third party information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Amix | Skeletonz Cms 1.0 | All versions |
References
- http://secunia.com/advisories/42385Vendor Advisory
- http://secunia.com/advisories/42385Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-4734?
How severe is CVE-2010-4734?
How do I fix CVE-2010-4734?
Are you affected by CVE-2010-4734?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
