CVE-2010-4183
Severity CVSS v4.0:
Pending analysis
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
05/11/2010
Last modified:
11/04/2025
Description
Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:htmlpurifier:htmlpurifier:*:*:*:*:*:*:*:* | 4.0.0 (including) | |
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.0.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.0.0:beta:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.1.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.3.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.3.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.4.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.4.0:*:strict:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.4.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlpurifier:htmlpurifier:1.4.1:*:strict:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page