CVE-2010-2479

EUVD-2022-2859
Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
htmlpurifierhtmlpurifier
𝑥
≤ 4.1.0
htmlpurifierhtmlpurifier
𝑥
≤ 4.1.0
htmlpurifierhtmlpurifier
𝑥
≤ 4.1.0
htmlpurifierhtmlpurifier
1.0.0
htmlpurifierhtmlpurifier
1.0.0:beta
htmlpurifierhtmlpurifier
1.0.1
htmlpurifierhtmlpurifier
1.1.0
htmlpurifierhtmlpurifier
1.1.1
htmlpurifierhtmlpurifier
1.1.2
htmlpurifierhtmlpurifier
1.2.0
htmlpurifierhtmlpurifier
1.3.0
htmlpurifierhtmlpurifier
1.3.1
htmlpurifierhtmlpurifier
1.3.2
htmlpurifierhtmlpurifier
1.4.0
htmlpurifierhtmlpurifier
1.4.0
htmlpurifierhtmlpurifier
1.4.1
htmlpurifierhtmlpurifier
1.4.1
htmlpurifierhtmlpurifier
1.5.0
htmlpurifierhtmlpurifier
1.5.0
htmlpurifierhtmlpurifier
1.6.0
htmlpurifierhtmlpurifier
1.6.0
htmlpurifierhtmlpurifier
1.6.1
htmlpurifierhtmlpurifier
1.6.1
htmlpurifierhtmlpurifier
2.0.0
htmlpurifierhtmlpurifier
2.0.0
htmlpurifierhtmlpurifier
2.0.1
htmlpurifierhtmlpurifier
2.0.1
htmlpurifierhtmlpurifier
2.1.0
htmlpurifierhtmlpurifier
2.1.0
htmlpurifierhtmlpurifier
2.1.0
htmlpurifierhtmlpurifier
2.1.0
htmlpurifierhtmlpurifier
2.1.0
htmlpurifierhtmlpurifier
2.1.0
htmlpurifierhtmlpurifier
2.1.1
htmlpurifierhtmlpurifier
2.1.1
htmlpurifierhtmlpurifier
2.1.1
htmlpurifierhtmlpurifier
2.1.1
htmlpurifierhtmlpurifier
2.1.1
htmlpurifierhtmlpurifier
2.1.1
htmlpurifierhtmlpurifier
2.1.2
htmlpurifierhtmlpurifier
2.1.2
htmlpurifierhtmlpurifier
2.1.2
htmlpurifierhtmlpurifier
2.1.2
htmlpurifierhtmlpurifier
2.1.2
htmlpurifierhtmlpurifier
2.1.2
htmlpurifierhtmlpurifier
2.1.3
htmlpurifierhtmlpurifier
2.1.3
htmlpurifierhtmlpurifier
2.1.3
htmlpurifierhtmlpurifier
2.1.3
htmlpurifierhtmlpurifier
2.1.3
htmlpurifierhtmlpurifier
2.1.3
htmlpurifierhtmlpurifier
2.1.4
htmlpurifierhtmlpurifier
2.1.4
htmlpurifierhtmlpurifier
2.1.4
htmlpurifierhtmlpurifier
2.1.5
htmlpurifierhtmlpurifier
2.1.5
htmlpurifierhtmlpurifier
2.1.5
htmlpurifierhtmlpurifier
3.0.0
htmlpurifierhtmlpurifier
3.0.0
htmlpurifierhtmlpurifier
3.0.0
htmlpurifierhtmlpurifier
3.1.0
htmlpurifierhtmlpurifier
3.1.0
htmlpurifierhtmlpurifier
3.1.0
htmlpurifierhtmlpurifier
3.1.0:rc1
htmlpurifierhtmlpurifier
3.1.0:rc1
htmlpurifierhtmlpurifier
3.1.0:rc1
htmlpurifierhtmlpurifier
3.1.1
htmlpurifierhtmlpurifier
3.1.1
htmlpurifierhtmlpurifier
3.1.1
htmlpurifierhtmlpurifier
3.2.0
htmlpurifierhtmlpurifier
3.2.0
htmlpurifierhtmlpurifier
3.2.0
htmlpurifierhtmlpurifier
3.3.0
htmlpurifierhtmlpurifier
3.3.0
htmlpurifierhtmlpurifier
3.3.0
htmlpurifierhtmlpurifier
4.0.0
htmlpurifierhtmlpurifier
4.0.0
htmlpurifierhtmlpurifier
4.0.0
maharamahara
𝑥
≤ 1.0.14
maharamahara
0.9.0
maharamahara
0.9.1
maharamahara
0.9.2
maharamahara
1.0.0
maharamahara
1.0.1
maharamahara
1.0.2
maharamahara
1.0.3
maharamahara
1.0.4
maharamahara
1.0.5
maharamahara
1.0.6
maharamahara
1.0.7
maharamahara
1.0.8
maharamahara
1.0.9
maharamahara
1.0.10
maharamahara
1.0.11
maharamahara
1.0.12
maharamahara
1.0.13
maharamahara
1.1.0
maharamahara
1.1.0:alpha1
maharamahara
1.1.0:alpha2
maharamahara
1.1.0:alpha3
maharamahara
1.1.0:beta1
maharamahara
1.1.0:beta2
maharamahara
1.1.0:beta3
maharamahara
1.1.0:beta4
maharamahara
1.1.0:rc1
maharamahara
1.1.0:rc2
maharamahara
1.1.1
maharamahara
1.1.2
maharamahara
1.1.3
maharamahara
1.1.4
maharamahara
1.1.5
maharamahara
1.1.6
maharamahara
1.1.7
maharamahara
1.1.8
maharamahara
1.2.0
maharamahara
1.2.0:alpha1
maharamahara
1.2.0:alpha2
maharamahara
1.2.0:alpha3
maharamahara
1.2.0:beta1
maharamahara
1.2.0:beta2
maharamahara
1.2.0:beta3
maharamahara
1.2.0:beta4
maharamahara
1.2.0:rc1
maharamahara
1.2.1
maharamahara
1.2.2
maharamahara
1.2.3
maharamahara
1.2.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
php-htmlpurifier
bookworm
4.11.0-1
fixed
bullseye
4.11.0-1
fixed
lenny
no-dsa
sid
4.11.0-2
fixed
trixie
4.11.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mahara
dapper
dne
hardy
dne
jaunty
Fixed 1.0.9-2ubuntu0.7
released
karmic
Fixed 1.1.5-1ubuntu0.3
released
lucid
Fixed 1.2.4-1ubuntu0.1
released
maverick
Fixed 1.2.5-2
released
php-htmlpurifier
dapper
dne
hardy
dne
jaunty
dne
karmic
Fixed 3.3.0-1ubuntu0.1
released
lucid
Fixed 4.0.0+dfsg1-1ubuntu0.1
released
maverick
not-affected