Security Advisory

CVE-2010-1195

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-03-31 17:35:00
Last updated 2024-09-16 17:59:11
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.