← Database

CVE-2010-1489

MEDIUM CVSS: 4.3 Published: 2010-04-20 Modified: 2026-06-16

Description

The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, a different issue than CVE-2009-4074.

Affected Platforms

Microsoft Internet Explorer

Weakness Type

CWE-79

References