Description

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.

Remediation

References

CVE-2010-4209

Related Vulnerabilities

WordPress Plugin Slimstat Analytics Multiple Vulnerabilities (5.0.9)

PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2023-5869)

WordPress Plugin Portfolio Gallery-Photo Gallery Multiple Unspecified Vulnerabilities (2.0.72)

WordPress Plugin Get URL Cron Multiple Vulnerabilities (1.4.7)

MediaWiki CVE-2023-45367 Vulnerability (CVE-2023-45367)

Severity

Medium

Classification

CVE-2010-4209 CWE-707

Tags

Missing Update Known Vulnerabilities