CVE-2010-4710: XSS
Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a similar issue to CVE-2010-4569 and CVE-2010-4570.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4710?
CVE-2010-4710 is a moderate severity vulnerability that allows cross-site scripting (XSS) attacks.
How do I fix CVE-2010-4710?
To fix CVE-2010-4710, upgrade YUI to version 2.9.0 or later where the vulnerability is addressed.
What versions of YUI are affected by CVE-2010-4710?
CVE-2010-4710 affects YUI versions 2.2.0 to 2.8.2.
What is the nature of the attack for CVE-2010-4710?
CVE-2010-4710 allows remote attackers to inject arbitrary web script or HTML via the addItem method in the Menu widget.
Is CVE-2010-4710 a client-side or server-side vulnerability?
CVE-2010-4710 is a client-side vulnerability, specifically a cross-site scripting (XSS) issue.