CVE-2010-3882: XSS

Q: What is the severity of CVE-2010-3882?

CVE-2010-3882 has been classified with a medium severity level due to its potential for exploitation.

Q: How do I fix CVE-2010-3882?

To fix CVE-2010-3882, upgrade to CMS Made Simple version 1.7.2 or later to mitigate the vulnerabilities.

Q: What types of attacks are possible with CVE-2010-3882?

CVE-2010-3882 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts into affected CMS Made Simple pages.

Q: Which versions of CMS Made Simple are affected by CVE-2010-3882?

CVE-2010-3882 affects CMS Made Simple versions 1.7.1 and earlier.

Q: Can I be vulnerable to CVE-2010-3882 if I am using a patched version of CMS Made Simple?

If you are using a patched version of CMS Made Simple later than 1.7.1, you should not be vulnerable to CVE-2010-3882.

Published Oct 8, 2010

Updated

Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global Content, (3) Edit Global Content, (4) Add Article, (5) Add Category, (6) Add Field Definition, or (7) Add Shortcut module.

Affected Software

74 affected components

CMSmadesimple CMS Made Simple<=1.7.1

CMSmadesimple CMS Made Simple=0.10

CMSmadesimple CMS Made Simple=0.10.3

CMSmadesimple CMS Made Simple=0.10.4

CMSmadesimple CMS Made Simple=0.11

CMSmadesimple CMS Made Simple=0.11-beta5

CMSmadesimple CMS Made Simple=0.11-beta6

CMSmadesimple CMS Made Simple=0.11.1

CMSmadesimple CMS Made Simple=0.11.2

CMSmadesimple CMS Made Simple=0.12

CMSmadesimple CMS Made Simple=0.12-beta1

CMSmadesimple CMS Made Simple=0.12-beta2

CMSmadesimple CMS Made Simple=0.12.1

CMSmadesimple CMS Made Simple=0.12.2

CMSmadesimple CMS Made Simple=0.13-beta1

CMSmadesimple CMS Made Simple=0.13-beta2

CMSmadesimple CMS Made Simple=0.13-beta3

CMSmadesimple CMS Made Simple=1.0

CMSmadesimple CMS Made Simple=1.0-beta1

CMSmadesimple CMS Made Simple=1.0-beta2

CMSmadesimple CMS Made Simple=1.0-beta3

CMSmadesimple CMS Made Simple=1.0-beta4

CMSmadesimple CMS Made Simple=1.0-beta5

CMSmadesimple CMS Made Simple=1.0-beta6

CMSmadesimple CMS Made Simple=1.0.1

CMSmadesimple CMS Made Simple=1.0.2

CMSmadesimple CMS Made Simple=1.0.3

CMSmadesimple CMS Made Simple=1.0.4

CMSmadesimple CMS Made Simple=1.0.5

CMSmadesimple CMS Made Simple=1.0.6

CMSmadesimple CMS Made Simple=1.0.7

CMSmadesimple CMS Made Simple=1.0.8

CMSmadesimple CMS Made Simple=1.1

CMSmadesimple CMS Made Simple=1.1-rc1

CMSmadesimple CMS Made Simple=1.1-rc2

CMSmadesimple CMS Made Simple=1.1-rc3

CMSmadesimple CMS Made Simple=1.1.1

CMSmadesimple CMS Made Simple=1.1.2

CMSmadesimple CMS Made Simple=1.1.3.1

CMSmadesimple CMS Made Simple=1.1.4.1

CMSmadesimple CMS Made Simple=1.2

CMSmadesimple CMS Made Simple=1.2-beta1

CMSmadesimple CMS Made Simple=1.2-beta2

CMSmadesimple CMS Made Simple=1.2-beta3

CMSmadesimple CMS Made Simple=1.2-rc1

CMSmadesimple CMS Made Simple=1.2.1

CMSmadesimple CMS Made Simple=1.2.2

CMSmadesimple CMS Made Simple=1.2.3

CMSmadesimple CMS Made Simple=1.2.4

CMSmadesimple CMS Made Simple=1.2.5

CMSmadesimple CMS Made Simple=1.3

CMSmadesimple CMS Made Simple=1.3-beta1

CMSmadesimple CMS Made Simple=1.3-beta2

CMSmadesimple CMS Made Simple=1.3.1

CMSmadesimple CMS Made Simple=1.4

CMSmadesimple CMS Made Simple=1.4-beta1

CMSmadesimple CMS Made Simple=1.4-beta2

CMSmadesimple CMS Made Simple=1.4.1

CMSmadesimple CMS Made Simple=1.5

CMSmadesimple CMS Made Simple=1.5-beta1

CMSmadesimple CMS Made Simple=1.5.1

CMSmadesimple CMS Made Simple=1.5.2

CMSmadesimple CMS Made Simple=1.5.3

CMSmadesimple CMS Made Simple=1.5.4

CMSmadesimple CMS Made Simple=1.6

CMSmadesimple CMS Made Simple=1.6.1

CMSmadesimple CMS Made Simple=1.6.2

CMSmadesimple CMS Made Simple=1.6.3

CMSmadesimple CMS Made Simple=1.6.4

CMSmadesimple CMS Made Simple=1.6.5

CMSmadesimple CMS Made Simple=1.6.6

CMSmadesimple CMS Made Simple=1.6.7

CMSmadesimple CMS Made Simple=1.6.8

CMSmadesimple CMS Made Simple=1.7

Event History

Oct 8, 2010

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3882?

CVE-2010-3882 has been classified with a medium severity level due to its potential for exploitation.

How do I fix CVE-2010-3882?

To fix CVE-2010-3882, upgrade to CMS Made Simple version 1.7.2 or later to mitigate the vulnerabilities.

What types of attacks are possible with CVE-2010-3882?