CVE-2010-4183 | BDVDB-2026-43932 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://htmlpurifier.org/news/2010/0915-4.2.0-released
http://htmlpurifier.org/security/2010/css-quoting

Exploit#

No public exploit known

History#

Version 12010-11-05Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.