CVE-2010-4183

2022-10-0316:21:05

mitre

www.cve.org

html purifier

cross-site scripting

internet explorer

css

cve-2010-4183

5.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.