CVE-2010-1536: XSS
Cross-site scripting (XSS) vulnerability in the AddThis Button module 5.x before 5.x-2.2 and 6.x before 6.x-2.9 for Drupal allows remote authenticated users, with administer addthis privileges, to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1536?
CVE-2010-1536 has a moderate severity rating due to the potential exploitation via cross-site scripting.
How do I fix CVE-2010-1536?
To fix CVE-2010-1536, upgrade to AddThis Button module version 5.x-2.2 or 6.x-2.9 or later.
Who is affected by CVE-2010-1536?
CVE-2010-1536 affects remote authenticated users with administer addthis privileges on Drupal using vulnerable versions of the AddThis Button module.
What types of attacks can CVE-2010-1536 enable?
CVE-2010-1536 can enable attackers to inject arbitrary web scripts or HTML, leading to potential data theft or session hijacking.
Is there a known exploit for CVE-2010-1536?
While specific exploits for CVE-2010-1536 may not be widely publicized, the nature of the vulnerability makes it a concern for potential exploitation.