CVE-2010-4616

Published Dec 29, 2010 CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-2154 Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.
Github GHSA Github GHSA GHSA-39vm-rvwh-q86j ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter
History

No history.

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:51 AM
Reserved
Dec 29, 2010, 12:00 AM
Status
Modified
Published
Dec 29, 2010, 10:33 PM
Modified
Jun 16, 2026, 11:25 PM