CVE-2010-4610

Name of the Vulnerable Software and Affected Versions Html-edit CMS version 3.1.8

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the error parameter in the index.php file.

Recommendations For Html-edit CMS version 3.1.8, update the index.php file to properly sanitize the error parameter to prevent arbitrary web script or HTML injection. As a temporary workaround, consider restricting access to the index.php file until a patch is available.