CVE-2010-2480

Published: Jul 2, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element.

Affected (22)

Products: Makotemplates: Mako

Makotemplates

1 product

Mako

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Makotemplates Mako	Up to 0.3.3
Makotemplates Mako	Version 0.1.0
Makotemplates Mako	Version 0.1.10
Makotemplates Mako	Version 0.1.1
Makotemplates Mako	Version 0.1.2
Makotemplates Mako	Version 0.1.3
Makotemplates Mako	Version 0.1.4
Makotemplates Mako	Version 0.1.5
Makotemplates Mako	Version 0.1.6
Makotemplates Mako	Version 0.1.7
Makotemplates Mako	Version 0.1.8
Makotemplates Mako	Version 0.1.9
Makotemplates Mako	Version 0.2.0
Makotemplates Mako	Version 0.2.1
Makotemplates Mako	Version 0.2.2
Makotemplates Mako	Version 0.2.3
Makotemplates Mako	Version 0.2.4
Makotemplates Mako	Version 0.2.5
Makotemplates Mako	Version 0.2.6
Makotemplates Mako	Version 0.3.1
Makotemplates Mako	Version 0.3.2
Makotemplates Mako	Version 0.3