VYPR
← All advisories
Unrated severityNVD Advisory· Published May 24, 2010· Updated Apr 29, 2026

CVE-2010-2013

CVE-2010-2013

Description

Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected products

6
  • Createch Group/Lisk CMS6 versions
    cpe:2.3:a:createch-group:lisk_cms:4.4:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:createch-group:lisk_cms:4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:createch-group:lisk_cms:4.4:-:corporate:*:*:*:*:*
    • cpe:2.3:a:createch-group:lisk_cms:4.4:-:custom:*:*:*:*:*
    • cpe:2.3:a:createch-group:lisk_cms:4.4:-:e-commerce:*:*:*:*:*
    • cpe:2.3:a:createch-group:lisk_cms:4.4:-:extranet\/intranet:*:*:*:*:*
    • cpe:2.3:a:createch-group:lisk_cms:4.4:-:portal\/community:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.