CVE-2010-1536

Published: Apr 26, 2010Modified: Apr 29, 2026

2.1

Vector

AV:N/AC:H/Au:S/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x before 6.x-2.9 for Drupal allows remote authenticated users, with administer addthis privileges, to inject arbitrary web script or HTML via unspecified vectors.

Affected (29)

Products: Mearra: Addthis

Mearra

1 product

Addthis

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Mearra Addthis	Version 5.x-1.0
Mearra Addthis	Version 5.x-1.1
Mearra Addthis	Version 5.x-1.2
Mearra Addthis	Version 5.x-1.x dev
Mearra Addthis	Version 5.x-2.0
Mearra Addthis	Version 5.x-2.0 beta1
Mearra Addthis	Version 5.x-2.0 beta2
Mearra Addthis	Version 5.x-2.0 beta3
Mearra Addthis	Version 5.x-2.0 beta5
Mearra Addthis	Version 5.x-2.1
Mearra Addthis	Version 5.x-2.x dev

Configuration B

18 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mearra Addthis	Version 6.x-1.0
Mearra Addthis	Version 6.x-1.1
Mearra Addthis	Version 6.x-1.2
Mearra Addthis	Version 6.x-1.x dev
Mearra Addthis	Version 6.x-2.0
Mearra Addthis	Version 6.x-2.0 beta1
Mearra Addthis	Version 6.x-2.0 beta2
Mearra Addthis	Version 6.x-2.0 beta3
Mearra Addthis	Version 6.x-2.0 beta
Mearra Addthis	Version 6.x-2.1
Mearra Addthis	Version 6.x-2.2
Mearra Addthis	Version 6.x-2.3
Mearra Addthis	Version 6.x-2.4
Mearra Addthis	Version 6.x-2.5
Mearra Addthis	Version 6.x-2.6
Mearra Addthis	Version 6.x-2.7
Mearra Addthis	Version 6.x-2.8
Mearra Addthis	Version 6.x-2.x dev