Vulnerability Details : CVE-2010-4183
Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.
Vulnerability category: Cross site scripting (XSS)
Exploit prediction scoring system (EPSS) score for CVE-2010-4183
Probability of exploitation activity in the next 30 days: 0.11%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 43 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2010-4183
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2010-4183
-
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-4183
-
http://htmlpurifier.org/security/2010/css-quoting
CSS Quoting Full Disclosure - Security - HTML Purifier
-
http://htmlpurifier.org/news/2010/0915-4.2.0-released
HTML Purifier 4.2.0 released - News - HTML PurifierVendor Advisory
Products affected by CVE-2010-4183
- cpe:2.3:a:htmlpurifier:htmlpurifier:*:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.0.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.0:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.0:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.0:rc1:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.3:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.3:*:strict-standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.3:*:strict-lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.3:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.0:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.0:*:strict-standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.0:*:strict-lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.4.1:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.4.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.4.0:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.3.2:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.3.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.3.0:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.3.0:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.2.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.0.0:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.5:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.5:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.5:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.2:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.2:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.1:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.1:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.0.0:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.6.1:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.6.1:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.1.1:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.1.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.0.1:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.0.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:4.0.0:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.2.0:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.1:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.0:rc1:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.0.0:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.4:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.4:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.2:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.2:*:strict-standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.1:*:strict-lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.1:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.0:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.0.1:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.6.0:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.5.0:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.3.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.1.2:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.0.0:beta:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:4.0.0:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.2.0:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.1:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.1:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.1.0:rc1:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:3.0.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.4:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.3:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.3:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.2:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.2:*:strict-lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.1:*:strict-standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.1:*:standalone:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.1.0:*:lite:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:2.0.1:*:strict:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.6.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.5.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.4.1:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.3.1:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer
- cpe:2.3:a:htmlpurifier:htmlpurifier:1.2.0:*:*:*:*:*:*:*When used together with: Microsoft » Internet Explorer