Medium severity6.1NVD Advisory· Published Jun 22, 2021· Updated Jun 16, 2026

CVE-2010-4264

Description

It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vanilla OS/Vanilla Forumsllm-fuzzy
Range: <2.0.10

Patches

Vulnerability mechanics

References

github.com/vanilla/vanilla/commit/4535a059e4e24ca11a2ef0b4d754f262398bcecenvdPatchThird Party Advisory
seclists.org/oss-sec/2010/q4/282nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000