← Database

CVE-2010-2671

MEDIUM CVSS: 4.3 Published: 2010-07-08 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 through 4.2.0 allows remote attackers to inject arbitrary web script or HTML via the subTreeItem parameter.

Affected Platforms

Ez Ez Publish

Weakness Type

CWE-79

References