CVE-2010-1274

Published: Apr 6, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection.

Affected (26)

Products: Webtoolkit: Wt

Webtoolkit

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Webtoolkit Wt	Up to 3.1.0
Webtoolkit Wt	Version 1.1.4
Webtoolkit Wt	Version 1.1.5
Webtoolkit Wt	Version 1.1.6
Webtoolkit Wt	Version 1.1.7
Webtoolkit Wt	Version 2.0.0
Webtoolkit Wt	Version 2.0.1
Webtoolkit Wt	Version 2.0.4
Webtoolkit Wt	Version 2.0.5
Webtoolkit Wt	Version 2.1.0
Webtoolkit Wt	Version 2.1.1
Webtoolkit Wt	Version 2.1.2
Webtoolkit Wt	Version 2.1.3
Webtoolkit Wt	Version 2.1.4
Webtoolkit Wt	Version 2.1.5
Webtoolkit Wt	Version 2.2.0
Webtoolkit Wt	Version 2.2.1
Webtoolkit Wt	Version 2.2.2
Webtoolkit Wt	Version 2.2.3
Webtoolkit Wt	Version 2.99.0
Webtoolkit Wt	Version 2.99.1
Webtoolkit Wt	Version 2.99.2
Webtoolkit Wt	Version 2.99.3
Webtoolkit Wt	Version 2.99.4
Webtoolkit Wt	Version 2.99.5
Webtoolkit Wt	Version 3.0.0