CVE-2010-1195 Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a craft...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ikiwiki | = 2.0 | No fix listed |
| ikiwiki | = 2.1 | No fix listed |
| ikiwiki | = 2.2 | No fix listed |
| ikiwiki | = 2.3 | No fix listed |
| ikiwiki | = 2.4 | No fix listed |
| ikiwiki | = 2.5 | No fix listed |
| ikiwiki | = 2.10 | No fix listed |
| ikiwiki | = 2.11 | No fix listed |
| ikiwiki | = 2.12 | No fix listed |
| ikiwiki | = 2.13 | No fix listed |
| ikiwiki | = 2.14 | No fix listed |
| ikiwiki | = 2.15 | No fix listed |
| ikiwiki | = 2.16 | No fix listed |
| ikiwiki | = 2.17 | No fix listed |
| ikiwiki | = 2.18 | No fix listed |
| ikiwiki | = 2.19 | No fix listed |
| ikiwiki | = 2.20 | No fix listed |
| ikiwiki | = 2.30 | No fix listed |
| ikiwiki | = 2.31 | No fix listed |
| ikiwiki | = 2.31.1 | No fix listed |
| ikiwiki | = 2.31.2 | No fix listed |
| ikiwiki | = 2.31.3 | No fix listed |
| ikiwiki | = 2.40 | No fix listed |
| ikiwiki | = 2.41 | No fix listed |
| ikiwiki | = 2.42 | No fix listed |
Show 47 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ikiwiki | = 2.43 | No fix listed |
| ikiwiki | = 2.44 | No fix listed |
| ikiwiki | = 2.45 | No fix listed |
| ikiwiki | = 2.46 | No fix listed |
| ikiwiki | = 2.47 | No fix listed |
| ikiwiki | = 2.48 | No fix listed |
| ikiwiki | = 2.49 | No fix listed |
| ikiwiki | = 2.50 | No fix listed |
| ikiwiki | = 2.51 | No fix listed |
| ikiwiki | = 2.52 | No fix listed |
| ikiwiki | = 2.53 | No fix listed |
| ikiwiki | = 3.00 | No fix listed |
| ikiwiki | = 3.01 | No fix listed |
| ikiwiki | = 3.02 | No fix listed |
| ikiwiki | = 3.03 | No fix listed |
| ikiwiki | = 3.04 | No fix listed |
| ikiwiki | = 3.05 | No fix listed |
| ikiwiki | = 3.06 | No fix listed |
| ikiwiki | = 3.07 | No fix listed |
| ikiwiki | = 3.08 | No fix listed |
| ikiwiki | = 3.09 | No fix listed |
| ikiwiki | = 3.10 | No fix listed |
| ikiwiki | = 3.11 | No fix listed |
| ikiwiki | = 3.12 | No fix listed |
| ikiwiki | = 3.13 | No fix listed |
| ikiwiki | = 3.14 | No fix listed |
| ikiwiki | = 3.141 | No fix listed |
| ikiwiki | = 3.1415 | No fix listed |
| ikiwiki | = 3.14159 | No fix listed |
| ikiwiki | = 3.141592 | No fix listed |
| ikiwiki | = 3.1415926 | No fix listed |
| ikiwiki | = 3.14159265 | No fix listed |
| ikiwiki | = 3.20091009 | No fix listed |
| ikiwiki | = 3.20091017 | No fix listed |
| ikiwiki | = 3.20091022 | No fix listed |
| ikiwiki | = 3.20091023 | No fix listed |
| ikiwiki | = 3.20091031 | No fix listed |
| ikiwiki | = 3.20091113 | No fix listed |
| ikiwiki | = 3.20091202 | No fix listed |
| ikiwiki | = 3.20091218 | No fix listed |
| ikiwiki | = 3.20100102.3 | No fix listed |
| ikiwiki | = 3.20100122 | No fix listed |
| ikiwiki | = 3.20100212 | No fix listed |
| ikiwiki | = 3.20100302 | No fix listed |
| debian/ikiwiki(Debian:12) | < 3.20100312 | 3.20100312 |
| debian/ikiwiki(Debian:13) | < 3.20100312 | 3.20100312 |
| debian/ikiwiki(Debian:14) | < 3.20100312 | 3.20100312 |
References
- ikiwiki.info vendor-advisory
- 38983 third-party-advisory vendor-advisory
- 39048 third-party-advisory vendor-advisory
- DSA-2020 vendor-advisory
- ADV-2010-0662 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2010-1195 vendor-advisory