← Back

CVE-2010-1195

nvd nist
Published: Mar 31, 2010Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.

Affected (69)

Products: Ikiwiki: Ikiwiki
1 product
Ikiwiki
Configuration A
69 vulnerable
Vulnerable SoftwareAffected Versions
Ikiwiki
Version 2.0
Version 2.10
Version 2.11
Version 2.12
Version 2.13
Version 2.14
Version 2.15
Version 2.16
Version 2.17
Version 2.18
Version 2.19
Version 2.1
Version 2.20
Version 2.2
Version 2.30
Version 2.31.1
Version 2.31.2
Version 2.31.3
Version 2.31
Version 2.3
Version 2.40
Version 2.41
Version 2.42
Version 2.43
Version 2.44
Version 2.45
Version 2.46
Version 2.47
Version 2.48
Version 2.49
Version 2.4
Version 2.50
Version 2.51
Version 2.52
Version 2.53
Version 2.5
Version 3.00
Version 3.01
Version 3.02
Version 3.03
Version 3.04
Version 3.05
Version 3.06
Version 3.07
Version 3.08
Version 3.09
Version 3.10
Version 3.11
Version 3.12
Version 3.13
Version 3.14159265
Version 3.1415926
Version 3.141592
Version 3.14159
Version 3.1415
Version 3.141
Version 3.14
Version 3.20091009
Version 3.20091017
Version 3.20091022
Version 3.20091023
Version 3.20091031
Version 3.20091113
Version 3.20091202
Version 3.20091218
Version 3.20100102.3
Version 3.20100122
Version 3.20100212
Version 3.20100302

References (10)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.