Unrated severityNVD Advisory· Published May 24, 2010· Updated Apr 29, 2026
CVE-2010-2014
CVE-2010-2014
Description
Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter.
Affected products
6cpe:2.3:a:createch-group:lisk_cms:4.4:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:createch-group:lisk_cms:4.4:*:*:*:*:*:*:*
- cpe:2.3:a:createch-group:lisk_cms:4.4:-:corporate:*:*:*:*:*
- cpe:2.3:a:createch-group:lisk_cms:4.4:-:custom:*:*:*:*:*
- cpe:2.3:a:createch-group:lisk_cms:4.4:-:e-commerce:*:*:*:*:*
- cpe:2.3:a:createch-group:lisk_cms:4.4:-:extranet\/intranet:*:*:*:*:*
- cpe:2.3:a:createch-group:lisk_cms:4.4:-:portal\/community:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.htbridge.ch/advisory/xss_vulnerability_in_lisk_cms.htmlnvdExploit
- secunia.com/advisories/39912nvdVendor Advisory
News mentions
0No linked articles in our index yet.