Medium severity6.1NVD Advisory· Published Aug 31, 2017· Updated May 13, 2026
CVE-2016-10510
CVE-2016-10510
Description
Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php.
Affected products
2- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/kohana/kohana/issues/107nvdExploitPatchThird Party Advisory
- www.checkmarx.com/advisories/cross-site-scripting-xss-vulnerability-in-kohana/nvdExploitThird Party Advisory
- github.com/kohana/kohana/releases/tag/v3.3.6nvdRelease NotesThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/01/msg00015.htmlnvdMailing ListThird Party Advisory
- advisory.checkmarx.net/advisory/CX-2016-4451nvd
News mentions
0No linked articles in our index yet.