CVE-2010-1593

N/A Unknown
Published: April 28, 2010 Modified: April 29, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (2) the Search parameter to forums/search (aka the search script).

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0450.html
Source: cve@mitre.org
Exploit
http://groups.google.com/group/silverstripe-announce/browse_thread/thread/f51749342eee9456
Source: cve@mitre.org
Patch
http://open.silverstripe.org/changeset/97074
Source: cve@mitre.org
Exploit Patch
http://open.silverstripe.org/wiki/ChangeLog/2.3.5
Source: cve@mitre.org
http://osvdb.org/61921
Source: cve@mitre.org
http://osvdb.org/61923
Source: cve@mitre.org
http://secunia.com/advisories/38290
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/38347
Source: cve@mitre.org
Vendor Advisory
http://www.securityfocus.com/archive/1/509139/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/37923
Source: cve@mitre.org
Patch
http://www.silverstripe.org/security-releases/
Source: cve@mitre.org
Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55838
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/55839
Source: cve@mitre.org
http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0450.html
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://groups.google.com/group/silverstripe-announce/browse_thread/thread/f51749342eee9456
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://open.silverstripe.org/changeset/97074
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Patch
http://open.silverstripe.org/wiki/ChangeLog/2.3.5
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/61921
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/61923
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/38290
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/38347
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.securityfocus.com/archive/1/509139/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/37923
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.silverstripe.org/security-releases/
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55838
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/55839
Source: af854a3a-2127-422b-91ae-364da2661108

26 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.6%
69th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

silverstripe

Related CVEs

CVE-2026-4827 N/A
CVE-2026-45218 7.7
CVE-2026-45215 5.3
CVE-2026-45214 8.5
CVE-2026-45213 7.6