CVE-2010-2665

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-07-08 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect detection of the "opening site."

Affected products

Opera Browser: through 10.53; through 10.10; 5.0, 5.0-beta2, 5.0-beta3, 5.0-beta4, 5.0-beta5, 5.0-beta6 (+99)

References

http://secunia.com/advisories/40250
http://www.opera.com/docs/changelogs/mac/1054/
http://www.opera.com/docs/changelogs/unix/1011/
http://www.opera.com/docs/changelogs/windows/1054/
http://www.opera.com/support/kb/view/955/
http://www.securityfocus.com/bid/40973
http://www.vupen.com/english/advisories/2010/1529
https://exchange.xforce.ibmcloud.com/vulnerabilities/60646
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11362
http://secunia.com/advisories/40250
http://www.opera.com/docs/changelogs/mac/1054/
http://www.opera.com/docs/changelogs/unix/1011/

Get alerted when CVE-2010-2665 or the next vulnerability affects your stack