CVE-2010-2013

Createch-group Lisk Cms - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

References (3)

[Vendor Advisory] http://secunia.com/advisories/39912

[Exploit] http://www.htbridge.ch/advisory/xss_vulnerability_in_product.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/511379/100/0/threaded

Scores

EPSS 0.0030

EPSS Percentile 52.7%

Classification

CWE

CWE-79

Status published

Affected Products (7)

createch-group/lisk_cms

n/a/n/a

Timeline

Published May 24, 2010

Tracked Since Feb 18, 2026