Back to Database
Status published
Medium
CVE-2010-1195
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1195
Credits & Attribution
No credits recorded in the NVD database.
References
More from ikiwiki
View All →CVE-2019-9187
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows...
High
7.5
CVE-2017-0356
Authentication bypass via repeated parameters
Critical
9.8
CVE-2016-9646
Commit metadata forgery via CGI::FormBuilder context-dependent APIs
Medium
5.3
CVE-2016-9645
Editing restriction bypass for git revert
Medium
6.5
CVE-2016-4561
Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm...
Medium
6.1
Affected Vendor
ikiwiki
View all reports →Affected Software
ikiwiki
Vulnerable Versions:
2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18, 2.19, 2.20, 2.30, 2.31, 2.31.1, 2.31.2, 2.31.3, 2.40, 2.41, 2.42, 2.43, 2.44, 2.45, 2.46, 2.47, 2.48, 2.49, 2.50, 2.51, 2.52, 2.53, 3.00, 3.01, 3.02, 3.03, 3.04, 3.05, 3.06, 3.07, 3.08, 3.09, 3.10, 3.11, 3.12, 3.13, 3.14, 3.141, 3.1415, 3.14159, 3.141592, 3.1415926, 3.14159265, 3.20091009, 3.20091017, 3.20091022, 3.20091023, 3.20091031, 3.20091113, 3.20091202, 3.20091218, 3.20100102.3, 3.20100122, 3.20100212, 3.20100302
Timeline
Official Publish:
March 31st, 2010
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.