CVE-2010-2479

Published Jul 6, 2010 CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2067-1 New mahara packages fix several vulnerabilities
EUVD EUVD EUVD-2022-2859 Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Github GHSA Github GHSA GHSA-6rm6-mjmh-86jq HTML Purifier Cross-site Scripting (XSS) vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 2:32 AM
Reserved
Jun 28, 2010, 12:00 AM
Status
Modified
Published
Jul 6, 2010, 5:17 PM
Modified
Jun 16, 2026, 11:20 PM