CVE-2010-4901

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-10-08 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter.

Affected products

Squiz Mysource Matrix: 3.28.3

References

http://osvdb.org/67838
http://secunia.com/advisories/41295
http://securityreason.com/securityalert/8439
http://www.packetstormsecurity.org/1009-advisories/ZSL-2010-4962.txt
http://www.securityfocus.com/bid/43020
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4962.php
http://osvdb.org/67838
http://secunia.com/advisories/41295
http://securityreason.com/securityalert/8439
http://www.packetstormsecurity.org/1009-advisories/ZSL-2010-4962.txt
http://www.securityfocus.com/bid/43020
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4962.php

Get alerted when CVE-2010-4901 or the next vulnerability affects your stack