CVE-2010-4734

Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters. NOTE: some of these details are obtained from third party information.

CVSS v2.0 NVD

2.6 LOWAV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

1.78% chance of exploitation in the next 30 days, 78th percentile

Published

2011-02-16

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15625

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15625

Security advisories

• http://secunia.com/advisories/42385
• http://www.securityfocus.com/bid/45081

References

• CVE Record
• NVD entry