CVE-2010-4642

Cross-site scripting (XSS) vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:0.9.543:*:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:0.9.790:*:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:0.9.793:*:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:0.9.840:*:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:0.9.1252:*:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:1.0:b1:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:1.0:b2:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:1.1:rc1:*:*:*:*:*:*

History

No history.

Information

Published : 2010-12-30 21:00

Updated : 2024-02-04 17:54


NVD link : CVE-2010-4642

Mitre link : CVE-2010-4642

CVE.ORG link : CVE-2010-4642


JSON object : View

Products Affected

xwiki

  • xwiki
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')