CVE-2010-1195

ikiwiki <2.53.5, <3.20100312 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.

References (5)

[Vendor Advisory] http://ikiwiki.info/security/#index36h2

[Vendor Advisory] http://secunia.com/advisories/38983

[Vendor Advisory] http://secunia.com/advisories/39048

[Vendor Advisory] http://www.vupen.com/english/advisories/2010/0662

[Third Party Advisory] http://www.debian.org/security/2010/dsa-2020

Scores

EPSS 0.0032

EPSS Percentile 54.7%

Classification

CWE

CWE-79

Status published

Affected Products (50)

ikiwiki/ikiwiki

... and 35 more

Timeline

Published Mar 31, 2010

Tracked Since Feb 18, 2026