← Database

CVE-2010-1195

MEDIUM CVSS: 4.3 Published: 2010-03-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.

Affected Platforms

Ikiwiki Ikiwiki

Weakness Type

CWE-79

References