CVE-2010-3025

MEDIUM 4.3CVE-2010-3025 · Published 16/08/2010 · updated 16/06/2026

In short

CVE-2010-3025 is a MEDIUM (CVSS 4.3) vulnerability affecting open blog (tomaz-muraus).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
open blog tomaz-muraus	`= 1.2.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by admin/posts/edit; and the (2) content parameter to application/modules/admin/controllers/pages.php, as reachable by admin/posts/edit.

References

More vulnerabilities in open blog

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free