CVE-2010-1195

Ikiwiki: JavaScript code injection via URIs in SVG image (v3.20100312)

Published Mar 31, 2010 CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-1225 Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 16, 2024, 5:59 PM
Reserved
Mar 30, 2010, 12:00 AM
Status
Modified
Published
Mar 31, 2010, 6:00 PM
Modified
Jun 16, 2026, 11:17 PM
Severity
Moderate
Public date
Mar 12, 2010, 12:00 AM